Behavioral task
behavioral1
Sample
NEAS.319ef620f7255754f8f5ce907a60a5b0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.319ef620f7255754f8f5ce907a60a5b0.exe
-
Size
117KB
-
MD5
319ef620f7255754f8f5ce907a60a5b0
-
SHA1
17c95751e5b8aa2f822cc166938d616bb9e6f67b
-
SHA256
eca8557589f514cab21f640254483c1b38a24328ad13d3c7c7fa3d3962afc5af
-
SHA512
80f36032a01931943a9d9acf267884f595c9091d2f1216548b7a56fbf9d9732367c5719db5bbd42e99f900e756b0024f23fbfd0e85736503082dd83713e572b4
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1YRMxr0O:ccm4FmowdHoS5ddWhRlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.319ef620f7255754f8f5ce907a60a5b0.exe
Files
-
NEAS.319ef620f7255754f8f5ce907a60a5b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE