Behavioral task
behavioral1
Sample
NEAS.11dfcf44e1cf1be672e803a8cdec2b60.exe
Resource
win7-20231020-en
General
-
Target
NEAS.11dfcf44e1cf1be672e803a8cdec2b60.exe
-
Size
118KB
-
MD5
11dfcf44e1cf1be672e803a8cdec2b60
-
SHA1
4f79612b79e5ff34fdccef7ea0f02906c7bf1c5d
-
SHA256
9c3ad6338112879cb68901028a5a921f0d67fe4119f7cc53d2e4ac7e795f1947
-
SHA512
67a41de9084236cab3669812371d57b5659169bff9d3a0640d57854a65a74cfe606c7e42214cdb904d10beead8a7f558a438912a07370d345437d325d72c1989
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLQS7ByFqpNTWt5:9cm4FmowdHoSdSyEpFWL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.11dfcf44e1cf1be672e803a8cdec2b60.exe
Files
-
NEAS.11dfcf44e1cf1be672e803a8cdec2b60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE