Behavioral task
behavioral1
Sample
NEAS.b82acae4464f41cfa93b341206c351b0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.b82acae4464f41cfa93b341206c351b0.exe
-
Size
64KB
-
MD5
b82acae4464f41cfa93b341206c351b0
-
SHA1
133d0d5a9f436005ed31420f74a1eb22c10a461a
-
SHA256
2cea418f659f45948cff0949b16b767a3b769af35ad70beb55a7e23374b1355d
-
SHA512
dff65ec4651934fc0a149d0e11f13f0bb4f0618ce592bc902d1ee768f1dce30302bd517d0f0835d349279c889c0b6504ff7927715dc9e87c2c8e6f4158b7936b
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNZaqps:khOmTsF93UYfwC6GIoutpYkJps
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b82acae4464f41cfa93b341206c351b0.exe
Files
-
NEAS.b82acae4464f41cfa93b341206c351b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE