Behavioral task
behavioral1
Sample
NEAS.df17f3e2eeb1105009985359d3ddca20.exe
Resource
win7-20231020-en
General
-
Target
NEAS.df17f3e2eeb1105009985359d3ddca20.exe
-
Size
393KB
-
MD5
df17f3e2eeb1105009985359d3ddca20
-
SHA1
f1d9208f9a70467e0ce666581a9d2002a0825f8c
-
SHA256
ce140ebf1438d727c7ce09452ff01b2f61a7d28c0cfaafdc0c8dd6ae18f039e1
-
SHA512
34d31c9afa7ed1c81c8d18031e00ba840ba87030a819203d13f891d02e85b3f812ed6ab1c4c6fc14a926a93672d4cb87d660177c0074f20a8bde0218d564f727
-
SSDEEP
6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqWX:T4wFHoSEubD2PW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.df17f3e2eeb1105009985359d3ddca20.exe
Files
-
NEAS.df17f3e2eeb1105009985359d3ddca20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ