Behavioral task
behavioral1
Sample
NEAS.35c43077628e6fac50668382407cc230.exe
Resource
win7-20231020-en
General
-
Target
NEAS.35c43077628e6fac50668382407cc230.exe
-
Size
96KB
-
MD5
35c43077628e6fac50668382407cc230
-
SHA1
05a4873af42ea2cfdabf9291d90058b613d843b9
-
SHA256
f19417333717111f34af7fa8eb2165d323e4e0a7919e012a972e818099ffac27
-
SHA512
5f5513cc9a23e400d4f68179f1e2ae3fb15536630cfe3c6c4dfce2251ba6a80046acb76051941fe26b2f18017a995e9942acdfa05ff56ea5623e810f3d712a77
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE68NR/VnN3X:kcm4FmowdHoSphraY/VNX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.35c43077628e6fac50668382407cc230.exe
Files
-
NEAS.35c43077628e6fac50668382407cc230.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE