Behavioral task
behavioral1
Sample
NEAS.c672d88684e9ebc6eb6ec49b17a61ef0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c672d88684e9ebc6eb6ec49b17a61ef0.exe
-
Size
129KB
-
MD5
c672d88684e9ebc6eb6ec49b17a61ef0
-
SHA1
1749a22fbd97d555d4c0c439054a1d49012f7c67
-
SHA256
7b67527ba7352722f67c0b74eda7399bcc1a60ab9f5211a90f00b704aad67f8e
-
SHA512
7540befac743d85208a46de338f048e901d22ad834f3a63baa9c2558c0e1b359d49723242177a6e11e86987144879f130ae037b2bebc18b9bb305b6d62400030
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4Jjy94X:9cm4FmowdHoS4qk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c672d88684e9ebc6eb6ec49b17a61ef0.exe
Files
-
NEAS.c672d88684e9ebc6eb6ec49b17a61ef0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE