Behavioral task
behavioral1
Sample
NEAS.11de7da93af4e5e59bb1c3d71a05bb40.exe
Resource
win7-20231023-en
General
-
Target
NEAS.11de7da93af4e5e59bb1c3d71a05bb40.exe
-
Size
325KB
-
MD5
11de7da93af4e5e59bb1c3d71a05bb40
-
SHA1
88c5eaaf406eb183319cd16f9436a0de0f21d997
-
SHA256
95ffb273b386862beec6dc43dab6222c300d8b662f92b87e2f6e0f96857b6785
-
SHA512
41dd432723b0d2489c72b185e7e07a94f630cd947a385782c7547462e74808064e856954f73e28a00043c1631b17b4e2b205d20e5ba2af4b45862b7de2cefd24
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1W:x4wFHoS3eFaKHpv/VycgE8W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.11de7da93af4e5e59bb1c3d71a05bb40.exe
Files
-
NEAS.11de7da93af4e5e59bb1c3d71a05bb40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE