Behavioral task
behavioral1
Sample
NEAS.90b8cdac5d96f0c16a60539008b98460.exe
Resource
win7-20231023-en
General
-
Target
NEAS.90b8cdac5d96f0c16a60539008b98460.exe
-
Size
89KB
-
MD5
90b8cdac5d96f0c16a60539008b98460
-
SHA1
b0fbcd312b9398d8f1d83f0ff408085244acef35
-
SHA256
665acca4e85ca2330574fbbd4f3275b792f3f591055e45a8f24c93085aa9d1cd
-
SHA512
dba340ae7f65f267f518a9d8c02300ed31c5ee4de0e934936ae608a263d0384a0fa4d399e3225b44689b1c4580d9d07b6276044d0105cf7b99ebf0d7e617877e
-
SSDEEP
1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8vzVQQ/fF2V8rY9gcxePABa1Am:chOmTsF93UYfwC6GIout5pi8rY9AABaN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.90b8cdac5d96f0c16a60539008b98460.exe
Files
-
NEAS.90b8cdac5d96f0c16a60539008b98460.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE