Behavioral task
behavioral1
Sample
NEAS.e33728b4c378a44e579f2d3d64f62d30.exe
Resource
win7-20231020-en
General
-
Target
NEAS.e33728b4c378a44e579f2d3d64f62d30.exe
-
Size
371KB
-
MD5
e33728b4c378a44e579f2d3d64f62d30
-
SHA1
f888c1cca25a7d16eb84d56fd85dd9608a959362
-
SHA256
3b7e1656cbe472e92d438070b6ae9b174faad6f8107121f73960bff71c8c2c30
-
SHA512
e9c0c0ed79ca2e0adf35cb23ceca4a8d23d5afbcd87f6eecfe052cf3dc0be9a7d89a00cb2a8b6a050e3b6b9689b7ddfe9d8a0e7d6ff1aee8a917e43714eacef4
-
SSDEEP
6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCyb:/4wFHoS4WEkMTHoSbG++tw+tYYyb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e33728b4c378a44e579f2d3d64f62d30.exe
Files
-
NEAS.e33728b4c378a44e579f2d3d64f62d30.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE