Behavioral task
behavioral1
Sample
NEAS.5b2a444cd0253f20621aff3960d9d930.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.5b2a444cd0253f20621aff3960d9d930.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.5b2a444cd0253f20621aff3960d9d930.exe
-
Size
75KB
-
MD5
5b2a444cd0253f20621aff3960d9d930
-
SHA1
d318b88592869487a503ba6e345e01059205ebd0
-
SHA256
7652080e47925d64c46d0ec798ffff2e63a20738981b7bc6aac3459334777efd
-
SHA512
73c830ddc65102ae7446cd3019a06ac6ca977f3713fccfe6973833d4013be0f2115ebfb22d09d4ee124f2c59b536d6d028e15ab96a921bdfb010ff3aa0594547
-
SSDEEP
1536:y4QQ6NSyM61l19piO+LV8YEoI/EU9RUe4mORnVWSg/gI5+AbmVXc:y4X6NSyfnpijeYEoIcq45JV5W5+AMM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5b2a444cd0253f20621aff3960d9d930.exe
Files
-
NEAS.5b2a444cd0253f20621aff3960d9d930.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE