Behavioral task
behavioral1
Sample
NEAS.371f520d842b1f485cea385f68dc51a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.371f520d842b1f485cea385f68dc51a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.371f520d842b1f485cea385f68dc51a0.exe
-
Size
500KB
-
MD5
371f520d842b1f485cea385f68dc51a0
-
SHA1
aa69ac2af8dd81f8eaf5fdd02fafc92ea696a4a8
-
SHA256
e5845ec66d097d438904b5b07512c3f1ed965f2ec7e525fe2a00a2d7b9c69a81
-
SHA512
97e87c879512f947feecb29cd909c1ca25aacbea3f3aeb0fedd2ad334f01fcf9113a773161f299254bcbc9c3381d5f7768aecbfe32302b9352682d39f06e8ec1
-
SSDEEP
12288:EKIxyKV0XBSirlQCCiCH48uSmMsBV1Gh7cXWg+pcyZZ:sV6BrlQ3WSpssxeyZZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.371f520d842b1f485cea385f68dc51a0.exe
Files
-
NEAS.371f520d842b1f485cea385f68dc51a0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lea Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE