Behavioral task
behavioral1
Sample
NEAS.ce57ac2e2989f0da8b9fff3144013490.exe
Resource
win7-20230831-en
General
-
Target
NEAS.ce57ac2e2989f0da8b9fff3144013490.exe
-
Size
294KB
-
MD5
ce57ac2e2989f0da8b9fff3144013490
-
SHA1
9c91d43be270f703e4b6f6cc2cb37fcb8091a83d
-
SHA256
bf638e836f9a6dbca51e63686914af33edd515754e262a887c12e966cfc0bcf2
-
SHA512
6b5c25f8db1373e7c99c55406e3ea30c481b4772b684a4eeacde35eaf36db4874e1c27f539aa61fb52680bcf9f20c136c33910f2ca05e45aa30e501c0da7bb97
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOFltH4t+IDvSXrh5g8hZI:y4wFHoS3eFp3IDvSbh5nPI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ce57ac2e2989f0da8b9fff3144013490.exe
Files
-
NEAS.ce57ac2e2989f0da8b9fff3144013490.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE