Behavioral task
behavioral1
Sample
NEAS.df07fb653d7197f6c84636840f490400.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.df07fb653d7197f6c84636840f490400.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.df07fb653d7197f6c84636840f490400.exe
-
Size
344KB
-
MD5
df07fb653d7197f6c84636840f490400
-
SHA1
b821b0a4bd4a3724163541f4adeeeb084be800aa
-
SHA256
254818ff796d5c099ff4c4f9a28dd38a26bbd071f4547b5db73737411f980cf8
-
SHA512
9681606a7d20d0f57d92eddeb89954b50fcb066b953458f19cb61d8341262013cee751d4c8599f8a0cd8a49af464f13a2e8251a4cf92197d2768cf1f4a38e023
-
SSDEEP
6144:uuq1yy/pjnkWcLkONgMDGMHTiLCwKurw0UA2JEDm40IQKEVIgAwCeI:y1yc9kWc4u7DGMyCVp+y3KEJ/fI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.df07fb653d7197f6c84636840f490400.exe
Files
-
NEAS.df07fb653d7197f6c84636840f490400.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 53KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE