Behavioral task
behavioral1
Sample
NEAS.b3711f21b09f57defa6608dec0899ac0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.b3711f21b09f57defa6608dec0899ac0.exe
-
Size
336KB
-
MD5
b3711f21b09f57defa6608dec0899ac0
-
SHA1
c38f0015d7b56ae86e4d444e7de984b6e107575f
-
SHA256
1591ce6b7104b0d6b9108096d99bd1d739dad6c26b27f3036a58906ce7a23a92
-
SHA512
cb07e7b131c2797b5089d232b982e2be42c6816687e48f751cfb0823b5692087bd7a987d41c355fdace1f54c4c1c11b449f510bd797078b1f2104d1dacc82f12
-
SSDEEP
6144:EmVnkG7Rx1Ui7F9RuOO48iJH0qBLsJgTkDen3wgiJmti/zkvoPIhkD0g/fh7yNIX:AeRx1F7uOO/W0YLsJOkD09ommzkAPSk7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b3711f21b09f57defa6608dec0899ac0.exe
Files
-
NEAS.b3711f21b09f57defa6608dec0899ac0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ