Behavioral task
behavioral1
Sample
NEAS.6d21e3764c410f730b72f02b79423c40.exe
Resource
win7-20230831-en
General
-
Target
NEAS.6d21e3764c410f730b72f02b79423c40.exe
-
Size
409KB
-
MD5
6d21e3764c410f730b72f02b79423c40
-
SHA1
850453d747a61d1184ed67c66b6f8208a2daaf9c
-
SHA256
fa1fce6def2e4446c7a51e9ba55556a9723f7e49fcd350b130ad0f2d23188043
-
SHA512
54dcd790f2a32291278988811e9aa09e58c7cf37d63ffa9ea17e42764d1c16de277cc83023a5ba0d9aac8bc9a163fed208a1ad5b3b1ccf418239b1ca4fbb9bd3
-
SSDEEP
12288:d4wFHoSgWj16thri4gfkDVmuXWOPWHxxFP2cIIS:jh6thrLg8BmuXWOPWHxxFHw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d21e3764c410f730b72f02b79423c40.exe
Files
-
NEAS.6d21e3764c410f730b72f02b79423c40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE