Behavioral task
behavioral1
Sample
NEAS.9088c6aee630314653f0f38e9a93e0b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9088c6aee630314653f0f38e9a93e0b0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9088c6aee630314653f0f38e9a93e0b0.exe
-
Size
56KB
-
MD5
9088c6aee630314653f0f38e9a93e0b0
-
SHA1
f47ea56fc955ad0d859cb8b9d85ffd091b83e94d
-
SHA256
57b55948bf9efa844d8a57f6b927c75be5861b6ae5da26f870d0653147fbaf02
-
SHA512
2c978c5b072f206f6a2630a482d1eea06139e415ac2e32c5fd20277249fe8ff8bfc92831c686b3f87f4adea072069406450e192ab38a20c8e360ac7026e05d1c
-
SSDEEP
1536:4LKCxc6ythktVsC9bMn7PoC3txg89FpMhQu9d/:ily6aqOn7ACE89zMfd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9088c6aee630314653f0f38e9a93e0b0.exe
Files
-
NEAS.9088c6aee630314653f0f38e9a93e0b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE