Behavioral task
behavioral1
Sample
NEAS.bd1ac9eeb6d34f9a01a7b91e077825c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.bd1ac9eeb6d34f9a01a7b91e077825c0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.bd1ac9eeb6d34f9a01a7b91e077825c0.exe
-
Size
523KB
-
MD5
bd1ac9eeb6d34f9a01a7b91e077825c0
-
SHA1
3daef420e7c4d954b0c78e3cde7e7a665391ef5d
-
SHA256
a49faeadb35a2754a64473e91ac8d8d4b0e35dfd283732b3cc2e3308a77db2e3
-
SHA512
7afdf37129ef4d9f8b54d0020713c5503eae2f2a84d04bf7dd908c55a51e8f7fca073a2f05849f2b3396f08990aa14ace17dd86c3bd4772d9031ebd1b61d0e7c
-
SSDEEP
6144:7k0ZnQ0jZSXyHLrDaxIywWQRsyOO3DRrwsS05/tAYBa5RCRbV:7SXyH3DaomyZVxBa5G5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bd1ac9eeb6d34f9a01a7b91e077825c0.exe
Files
-
NEAS.bd1ac9eeb6d34f9a01a7b91e077825c0.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE