Behavioral task
behavioral1
Sample
NEAS.08be1bac99fcefb39d9a276f5e418300.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.08be1bac99fcefb39d9a276f5e418300.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.08be1bac99fcefb39d9a276f5e418300.exe
-
Size
101KB
-
MD5
08be1bac99fcefb39d9a276f5e418300
-
SHA1
76b02448c15d6a985005b21738a661a00fd2d4d4
-
SHA256
6f86cacb636b1846016896ef3d3f52b5fc586db60f3f59415804a5248c41a363
-
SHA512
48d88d6578a7bfd788833f57b22346208e0ef39886a3460c964f226cccef223f6531fca679c3aae84b3746dfaf760278bc36cb3a84a9038e145ff57b0a221863
-
SSDEEP
1536:izqsQ5PIt4+/yfeB6rAnYjBOik5h36lB4H:m0PsymB6kYjB7WgP4H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.08be1bac99fcefb39d9a276f5e418300.exe
Files
-
NEAS.08be1bac99fcefb39d9a276f5e418300.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE