Behavioral task
behavioral1
Sample
NEAS.c0f7ba9f0f8cf8de35617023cd526010.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c0f7ba9f0f8cf8de35617023cd526010.exe
-
Size
52KB
-
MD5
c0f7ba9f0f8cf8de35617023cd526010
-
SHA1
51a703dfc99d402273ac89c12f9b5bc238e3be3c
-
SHA256
d6a4bbbd32993afcfbeb40664c0fe4055296618ce02d17ce7d1e41eca35b76ae
-
SHA512
232a5f25c2b7472e48fc75279d2b9fd9eae72b86c5fc92699ce41e9a6ce28ca0017470de5338c2aa1f6bb3fd72da0c5b32d8d9de0a84edbb4d0373e6c04d9d7f
-
SSDEEP
1536:DvQBeOGtrYS3srx93UBWfwC6Ggnouy8VHz/zL:DhOmTsF93UYfwC6GIout1/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c0f7ba9f0f8cf8de35617023cd526010.exe
Files
-
NEAS.c0f7ba9f0f8cf8de35617023cd526010.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE