Behavioral task
behavioral1
Sample
NEAS.21ff611b2c57197439dc25c8f38aa850.exe
Resource
win7-20230831-en
General
-
Target
NEAS.21ff611b2c57197439dc25c8f38aa850.exe
-
Size
437KB
-
MD5
21ff611b2c57197439dc25c8f38aa850
-
SHA1
4291efaa36e7c9666fe6d140dc6524581dccc027
-
SHA256
eec4a58bc40300343d810672f591a5687891dad13c8a8eb3663fd53c8d86d8a7
-
SHA512
af4e6297c78e44c5eebbdaf8a798e6b830051c8a8a4d33f8896d5088e987e92a7d3e1173f059db3bb36d50524db4e7ef5868e43b602700ea375c010fc41d82fe
-
SSDEEP
12288:0oUi831MjnpWqzkMA0v0VjPN3katXvHAvnp:Hf+1MCMbSjPqatYB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.21ff611b2c57197439dc25c8f38aa850.exe
Files
-
NEAS.21ff611b2c57197439dc25c8f38aa850.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EUPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE