Behavioral task
behavioral1
Sample
NEAS.4651fd8f42913c2cccbb10107203bc20.exe
Resource
win7-20230831-en
General
-
Target
NEAS.4651fd8f42913c2cccbb10107203bc20.exe
-
Size
82KB
-
MD5
4651fd8f42913c2cccbb10107203bc20
-
SHA1
11a58b741290f31babcf49617aec5754fbe5ffcd
-
SHA256
73c3f30b42d340ea5fdd53ae2dc8e336357e0b09b4f8a93a9f576a3f2fcf7e19
-
SHA512
7babb4d91ffad62438ef80da3a42125af5f223f00038f0f103168710a5807467cdd4a9e9d465579d30a2e00985297e372adb94a7b988146210cc8bd683ff7f48
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEmZ:BeT7BVwxfvEFwjRZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4651fd8f42913c2cccbb10107203bc20.exe
Files
-
NEAS.4651fd8f42913c2cccbb10107203bc20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE