Behavioral task
behavioral1
Sample
NEAS.544c9c61050dc2c592ea041b29aa5df0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.544c9c61050dc2c592ea041b29aa5df0.exe
-
Size
166KB
-
MD5
544c9c61050dc2c592ea041b29aa5df0
-
SHA1
5acc0cace3b6ac07ef04dd3d97ed563b2d42619b
-
SHA256
a0c564fe6198289bf8c617fe0170dc0113ded8c8dbb4da42d681bd1c85a5eb10
-
SHA512
94e4e9ac907898d3e1669433829fc41e4e5f2e9b0f39eca37edd9cf2afa347dd7a668af4b39e7afb2431b8c9db653ad4491f2c8ffe380ec7677b559a4d209426
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4t6NDWOH148BqCF6:kcm4FmowdHoSphraHcpOFltH4ttj8Bw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.544c9c61050dc2c592ea041b29aa5df0.exe
Files
-
NEAS.544c9c61050dc2c592ea041b29aa5df0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE