Behavioral task
behavioral1
Sample
NEAS.cec53d4095bec3ab42cfb5e76d4e7700.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.cec53d4095bec3ab42cfb5e76d4e7700.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.cec53d4095bec3ab42cfb5e76d4e7700.exe
-
Size
6.9MB
-
MD5
cec53d4095bec3ab42cfb5e76d4e7700
-
SHA1
a9382405a266a005c8959d213fde7228d79d864f
-
SHA256
28ec520ce7dbb81ae7e67c3ed366529b2b257a0f35bbf8b1758e8d150ed6fcfb
-
SHA512
b8a1af6b6b87676226d0a5abd747fd8985219b5c22593aedbe81c175abc00169f69b35ff1fd1399972e0ca6805b3992ed335dc9caa395f7bb2928191df41c342
-
SSDEEP
196608:Ub3bPk5HyC8k5h/wDdEoNiV4I/WWwA7mIb1zRbqVVS:Ub3bPk5HPhJCIb/KS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cec53d4095bec3ab42cfb5e76d4e7700.exe
Files
-
NEAS.cec53d4095bec3ab42cfb5e76d4e7700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE