Behavioral task
behavioral1
Sample
NEAS.5cfc04882079da32980ec11ce13a1a50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5cfc04882079da32980ec11ce13a1a50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.5cfc04882079da32980ec11ce13a1a50.exe
-
Size
69KB
-
MD5
5cfc04882079da32980ec11ce13a1a50
-
SHA1
b2313aacfd4ce5a161af66f8a4664712c29b450b
-
SHA256
642525b66d1a8d807a84b6cfcae746267260eaaaa1ab21fd213beff3011b6965
-
SHA512
5c4a374db7cd67b33a867613cd2ad3495c26f768dc6bb142fe70975a6226611621074effe950a20176ff11b6d7b8385ec9ec9375388231049898bfb5126ad602
-
SSDEEP
1536:LAiqYVsMe80ZTy0/rwENpf9fGATp/PsFKC6Sle7:smVW8iTX/3Rfl4KQlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5cfc04882079da32980ec11ce13a1a50.exe
Files
-
NEAS.5cfc04882079da32980ec11ce13a1a50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE