Behavioral task
behavioral1
Sample
NEAS.b9c4cadae433137b81927de6d66714b0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.b9c4cadae433137b81927de6d66714b0.exe
-
Size
126KB
-
MD5
b9c4cadae433137b81927de6d66714b0
-
SHA1
d3f3e2e24c894e611c65dcb3d3ed732b8416207a
-
SHA256
67dc0cb8f60038d3734c925dfcff4e899dd51fd6c5b75b25b8c18cedf5436666
-
SHA512
8aeddb260b6ca979267e187116074adb9793965b5e0fdf18c3716b2688cb427cb231b059b1b211e2453e4d1f5e25582433d90783d419e35783495ed8793e7fd6
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1U+a8+NTTyuz4:ccm4FmowdHoS5ddWX+a/Ni04
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b9c4cadae433137b81927de6d66714b0.exe
Files
-
NEAS.b9c4cadae433137b81927de6d66714b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE