Behavioral task
behavioral1
Sample
NEAS.c8a6b0cc7b8c202b0cf100b52d4610e0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c8a6b0cc7b8c202b0cf100b52d4610e0.exe
-
Size
316KB
-
MD5
c8a6b0cc7b8c202b0cf100b52d4610e0
-
SHA1
bf3919e3485ce695376dc35ab28f603aea65d88e
-
SHA256
7855eeb728822d581bc1e65f16efc6eff58f6f758f6a3b3704f646a6ffce1ed1
-
SHA512
07ac367b834e17eab767f86e98b9b6a9bbb2ce2fd65cb443da07e8a7b59c6ff2651c9caf9e2ffad040e2febd026542aa3ccda479d12a0c33851794e86c7693d3
-
SSDEEP
6144:rcm4FmowdHoS8ddWX+aWWwP8be4zDizdHTF+WPU9wX9+oPUQ8iv299hr/t0j7Wca:x4wFHoS8ddWX+D/YOzdpLPU9wXFUQ8kU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c8a6b0cc7b8c202b0cf100b52d4610e0.exe
Files
-
NEAS.c8a6b0cc7b8c202b0cf100b52d4610e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ