Behavioral task
behavioral1
Sample
NEAS.f3d56ccf627b9704ad9a6b172afe2ab0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.f3d56ccf627b9704ad9a6b172afe2ab0.exe
-
Size
63KB
-
MD5
f3d56ccf627b9704ad9a6b172afe2ab0
-
SHA1
0de433efe55d2f6eab13d9153f106ad37aef8d47
-
SHA256
69e16c06f4d4a5c0c9a1272ab8832c6d01ffd764a19518174ca0723383fa3dba
-
SHA512
563b9d18345040a7fc901be25a4edac51136ef5b583ce7bbe5452ff28f9d9977bd0525b69ce67dcbaa017e628c70503f33b7931f47b25c29b1991669a689b9fa
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5DinY4ec:/hOmTsF93UYfwC6GIout+fF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f3d56ccf627b9704ad9a6b172afe2ab0.exe
Files
-
NEAS.f3d56ccf627b9704ad9a6b172afe2ab0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE