Behavioral task
behavioral1
Sample
NEAS.e291ff93cf488dfccf1ced5e788d09e0.exe
Resource
win7-20231025-en
General
-
Target
NEAS.e291ff93cf488dfccf1ced5e788d09e0.exe
-
Size
52KB
-
MD5
e291ff93cf488dfccf1ced5e788d09e0
-
SHA1
d376c372e1bf1786f3b7bee25a1e0274d2544b91
-
SHA256
138389f525770f2654715d14a5f427dd38d64f2146b9251c8f070a45f7362521
-
SHA512
4aacf86abbfa15f940eea561cbdc93a09246b1c75442c53853fae1bb5942e5ff3cb8ee6fb36d8c1deb301b605622378b8f8a643a49d9c6b23e19a0d56d4b00c9
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNwaMEOKWGv:khOmTsF93UYfwC6GIoutpY71ENR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e291ff93cf488dfccf1ced5e788d09e0.exe
Files
-
NEAS.e291ff93cf488dfccf1ced5e788d09e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE