Behavioral task
behavioral1
Sample
NEAS.c7d15a3089d1cba456f1dc24b722a9a0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.c7d15a3089d1cba456f1dc24b722a9a0.exe
-
Size
320KB
-
MD5
c7d15a3089d1cba456f1dc24b722a9a0
-
SHA1
18c8511665f814a62e0ad9b5e0d47f4c3a084847
-
SHA256
5eba596cafaaace40b16f20b9cb0c99bfb423eaa324b3b9d732cebd6d3fc8e05
-
SHA512
6e08833d9cf1dc44bb31da8038dec06492c30965eac0c28be7b585e092d9bf1f0bcf2c29b144b5d4d2ef740475acf5f9f03e3b2372798769d2bf57526997ab0e
-
SSDEEP
6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDh:/4wFHoS4d0G8HoljTVhRDh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c7d15a3089d1cba456f1dc24b722a9a0.exe
Files
-
NEAS.c7d15a3089d1cba456f1dc24b722a9a0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE