Behavioral task
behavioral1
Sample
NEAS.7daff470126c941b2aec6d5b9993d520.exe
Resource
win7-20230831-en
General
-
Target
NEAS.7daff470126c941b2aec6d5b9993d520.exe
-
Size
131KB
-
MD5
7daff470126c941b2aec6d5b9993d520
-
SHA1
e67eab0e51e439846c1629f1b5c72f32e4fc74ac
-
SHA256
945d6ea5b702c759d0d8682fd60fce710d42b32123e85de5b5a72e528a8adb55
-
SHA512
a43ce941087cae1177124f772aa83e29b3205a98b9ffd663af2dbf9b1d8713e7b1a33d9b0a232af873548ff2249c02ba92436b2c2038d6032c6d02284c08d006
-
SSDEEP
3072:xhOmTsF93UYfwC6GIout03Fv9KdYGUgP9yu/8Oj1X:xcm4FmowdHoS03F2Y92EuX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7daff470126c941b2aec6d5b9993d520.exe
Files
-
NEAS.7daff470126c941b2aec6d5b9993d520.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE