Behavioral task
behavioral1
Sample
NEAS.cbf5b50e8eb8fa9ddcf7e72f1adea900.exe
Resource
win7-20230831-en
General
-
Target
NEAS.cbf5b50e8eb8fa9ddcf7e72f1adea900.exe
-
Size
99KB
-
MD5
cbf5b50e8eb8fa9ddcf7e72f1adea900
-
SHA1
a93b5e0c6d49dff6eaebb49b92b9ea1dbbb78f72
-
SHA256
bcc0a35af49353cea5602b8b35fab2cc736c6c1cdbe7ac45dd9d2cc2499bc6a3
-
SHA512
43a8878d553859b2d539f93564edcd2855f21e7a3432867af5b50dbff4efcbc86121ad65ce039a3905d8c9f41c1b2f364a2fe6d785fed04889d66be323f16f31
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+g:9cm4FmowdHoSZ6lCg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cbf5b50e8eb8fa9ddcf7e72f1adea900.exe
Files
-
NEAS.cbf5b50e8eb8fa9ddcf7e72f1adea900.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE