Behavioral task
behavioral1
Sample
NEAS.aab2490f6a3b563e6ee439cc6cbd6710.exe
Resource
win7-20231020-en
General
-
Target
NEAS.aab2490f6a3b563e6ee439cc6cbd6710.exe
-
Size
98KB
-
MD5
aab2490f6a3b563e6ee439cc6cbd6710
-
SHA1
54123aedc1d4ac59ff1edfd4030733f34a0ff101
-
SHA256
9d8fb7f83fd77ea45e64999ebb066188631c735b3a166c3644c7d3649a57d4f3
-
SHA512
bac6165b38f934c69f14c578697b69276a2fe1fedd161a31252c4504885672db484d8fa3d612edab35ecafbd44b88b009de3412f9ce9c0ab6ca47d21c303f96b
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQkPvA3qrEvO7C8agAzq/M:khOmTsF93UYfwC6GIoutpYcvrqrE6LAl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.aab2490f6a3b563e6ee439cc6cbd6710.exe
Files
-
NEAS.aab2490f6a3b563e6ee439cc6cbd6710.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE