Behavioral task
behavioral1
Sample
NEAS.c7cb3ba0211010f5ace9d0082e1c1430.exe
Resource
win7-20231023-en
General
-
Target
NEAS.c7cb3ba0211010f5ace9d0082e1c1430.exe
-
Size
96KB
-
MD5
c7cb3ba0211010f5ace9d0082e1c1430
-
SHA1
4cc55cc586d2c9ee0444d70699323f2924cb489e
-
SHA256
c47d67477b812c1c5a1882378b71fdb54b866d030d415374a4d6d97bc954bc96
-
SHA512
e29e2aa930a55940bbc3bddac771f7b3b88092fde9055afe3947ff274643b1f8ed1ce994915f63f15673fd4771a156192d7030839c82d273738df161887756c8
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEm1:BeT7BVwxfvEFwjR1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c7cb3ba0211010f5ace9d0082e1c1430.exe
Files
-
NEAS.c7cb3ba0211010f5ace9d0082e1c1430.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE