Behavioral task
behavioral1
Sample
NEAS.bd566fce0a79696612435725f8352bf0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.bd566fce0a79696612435725f8352bf0.exe
-
Size
352KB
-
MD5
bd566fce0a79696612435725f8352bf0
-
SHA1
1a2447cc707b5313e89333d22aed344f8a903e09
-
SHA256
5a9bbeafab06decb090341fd497b90f6d4351ee4426868c935f8ab2f562d680f
-
SHA512
3e437329cc76ba4f53c5c34a6a512751a7d2df688d690e8d117b8e857e01013b66ccc0910c336abc4c9d7691c8e322593101f60f4b404bcf66329161477a0e53
-
SSDEEP
6144:ccm4FmowdHoS5ddWhROAGwdZopQUeh5np:K4wFHoS5ddWhRtHAQUejp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bd566fce0a79696612435725f8352bf0.exe
Files
-
NEAS.bd566fce0a79696612435725f8352bf0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE