Behavioral task
behavioral1
Sample
NEAS.0958d7d8fa1f8a40ef15dc7b03786910.exe
Resource
win7-20231023-en
General
-
Target
NEAS.0958d7d8fa1f8a40ef15dc7b03786910.exe
-
Size
71KB
-
MD5
0958d7d8fa1f8a40ef15dc7b03786910
-
SHA1
fd71c6225f8ff5ef44bf73249bc53e01f0af995e
-
SHA256
c85d8a5dd5325ae41ee683e79637d7080d59738f7c947c7d965ed9720babfeb7
-
SHA512
870d32bc4ae8c1b69e20c4bf58388903beccaa6ad64c686896bd205e92794e285474c445b54d5a9d2520797b5534ad747366e3cbe257114f4022513f75dd8a9b
-
SSDEEP
1536:DvQBeOGtrYS3srx93UBWfwC6Ggnouy8TLU8cxqEM/3qR+7Jwt:DhOmTsF93UYfwC6GIoutpcxKfqR+qt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0958d7d8fa1f8a40ef15dc7b03786910.exe
Files
-
NEAS.0958d7d8fa1f8a40ef15dc7b03786910.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE