Behavioral task
behavioral1
Sample
NEAS.2bf40a455d92ff45e31dfc4975d7d9e0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.2bf40a455d92ff45e31dfc4975d7d9e0.exe
-
Size
119KB
-
MD5
2bf40a455d92ff45e31dfc4975d7d9e0
-
SHA1
e64ec77ea73f1537aaaa99eb2c1be108a67b22c3
-
SHA256
b848e0ebe422f9f77c3f9a52002a1cc0c6397a62b4cef5c9f360fe6ab8018043
-
SHA512
6c5862949cc79b6fce2a96c79e5e19dd97d967d70130dc3d13b4f632b4c9614a01d7224a1ef71ea5ed0344d9e9e7f4124e9b2c2702c7533425c040d2ea6cffa7
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6Bo/C:kcm4FmowdHoSphraHcpOra
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2bf40a455d92ff45e31dfc4975d7d9e0.exe
Files
-
NEAS.2bf40a455d92ff45e31dfc4975d7d9e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE