Behavioral task
behavioral1
Sample
NEAS.85f737ad1ee53bad93f152c4075c4310.exe
Resource
win7-20231020-en
General
-
Target
NEAS.85f737ad1ee53bad93f152c4075c4310.exe
-
Size
143KB
-
MD5
85f737ad1ee53bad93f152c4075c4310
-
SHA1
11061eecfea25e4c79c27d1f6a4cb9244edc3b2b
-
SHA256
bc66b33d4a282cfafc5d7e42ca69a6bee741502935a3780f8727d963c9bc2d40
-
SHA512
5ae50f34eea837817c1ea3a2fe805883fff349f6bfbba761947c50870c3410aef55e844b5a86833bd8c2a2b88a390edddfa8f9470ea1b7f0c40d3e3ee7504471
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuIIu+9j4t5liizNo:9cm4FmowdHoS4BfIu+9j6giBo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.85f737ad1ee53bad93f152c4075c4310.exe
Files
-
NEAS.85f737ad1ee53bad93f152c4075c4310.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE