Behavioral task
behavioral1
Sample
NEAS.4787830e3438beefd07d03fa8507e460.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4787830e3438beefd07d03fa8507e460.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4787830e3438beefd07d03fa8507e460.exe
-
Size
122KB
-
MD5
4787830e3438beefd07d03fa8507e460
-
SHA1
57999f847152503d7f4ba3f289472f45bd2f7574
-
SHA256
c136756698d566461e80ea667829606c0c518cd001b1ec406671735a1c34cdfa
-
SHA512
910c2a634cfbc26e9d31e75c22c09b0827b516c4972459bab5aaf8dfb9ab2d284d2295f080e86fa2c686d5246c6deb91c45b8bb42459cf6dec7b069bce36b4f8
-
SSDEEP
3072:ntM3J2PJ0aoUEzVI7+OrBSWGJXGJQ/deMr:nsJC+UEhG+cQGS/deK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4787830e3438beefd07d03fa8507e460.exe
Files
-
NEAS.4787830e3438beefd07d03fa8507e460.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE