Behavioral task
behavioral1
Sample
NEAS.3368fdf6240b38fe2b6404c6939c2ea0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.3368fdf6240b38fe2b6404c6939c2ea0.exe
-
Size
61KB
-
MD5
3368fdf6240b38fe2b6404c6939c2ea0
-
SHA1
4af57f55189c0119bd5182ae88b14c03ba29f5b2
-
SHA256
3ac752810f6ebfee57599af19efb18736f948a4596df6dc461c206c673b9295c
-
SHA512
2440d918f6a24bc4a95dc7a16b8f4f3411e479b36015b12d4dceefc3f864dcc63c03e28f2d3903d4900288ae38170fe4e7152429f0b06b18b18269b5f8ea2f65
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5D1S5M:/hOmTsF93UYfwC6GIoutK5M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3368fdf6240b38fe2b6404c6939c2ea0.exe
Files
-
NEAS.3368fdf6240b38fe2b6404c6939c2ea0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE