Behavioral task
behavioral1
Sample
NEAS.1d37c107627db2e13ae02f3f49b02740.exe
Resource
win7-20231023-en
General
-
Target
NEAS.1d37c107627db2e13ae02f3f49b02740.exe
-
Size
110KB
-
MD5
1d37c107627db2e13ae02f3f49b02740
-
SHA1
61e29ebc9ac1bbed9ae0b8dde67177faf9dc56c4
-
SHA256
0ba8705cce160ba1bf160f374efc85afc3b8971099fcca4e7af31213e6521458
-
SHA512
377f5d62c95d445c2c75e736ff8dbe63e164eefd1e19ee26c67e921d274664883248813e7a05bac5cf5e93388205dc2c355c54030395f4b6f0849ba74ad22c8a
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLCRSDAz4mlg7x1pIhX:9hOmTsF93UYfwC6GIoutz5yLpcgDE4Ju
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1d37c107627db2e13ae02f3f49b02740.exe
Files
-
NEAS.1d37c107627db2e13ae02f3f49b02740.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE