Behavioral task
behavioral1
Sample
NEAS.f4b92810c4b1bf5535daa0af1e6fd990.exe
Resource
win7-20230831-en
General
-
Target
NEAS.f4b92810c4b1bf5535daa0af1e6fd990.exe
-
Size
335KB
-
MD5
f4b92810c4b1bf5535daa0af1e6fd990
-
SHA1
d0423dc2f6b59fb04517b4c7e76c5568b5d6d3bf
-
SHA256
9da8ab9606e5034a420d447e5b6f181f80ff17683131b00421fbb7840639ea09
-
SHA512
6870f027adc59b8a2dc69e26c08581c79722ff6584de4b718fc3b7f6a86b852d6b10001991aabf95469c4224b3737f69278536b5587f18409c3d246cbeb2209d
-
SSDEEP
6144:ocm4FmowdHoStuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4Trt:u4wFHoStuGy/Sa+/sie0OpncKe/KFBOs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f4b92810c4b1bf5535daa0af1e6fd990.exe
Files
-
NEAS.f4b92810c4b1bf5535daa0af1e6fd990.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE