Behavioral task
behavioral1
Sample
NEAS.e2e640fd87ca639755689a88e1a641b0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.e2e640fd87ca639755689a88e1a641b0.exe
-
Size
378KB
-
MD5
e2e640fd87ca639755689a88e1a641b0
-
SHA1
0547d9b892a3d6333612cb9a54872c0874fb4951
-
SHA256
4215e5f7a79fedb9fa7c87c19a7b3f8de4fa58e1fc6222bf5ad0fa1aba3dd612
-
SHA512
120a5a25e9569b5f00d168b207c16380ac127b0705ea1dc7fcb010a577719333cf3d6cb87c41f1985543ad3734e74a38449120f8db44f16c9a9d2290ff1a08e9
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXRN:Xqnum1F6/789ujYTyLylze70wi3BEml
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e2e640fd87ca639755689a88e1a641b0.exe
Files
-
NEAS.e2e640fd87ca639755689a88e1a641b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE