Behavioral task
behavioral1
Sample
NEAS.ce4d092871ccb80a7078aa4def5c9930.exe
Resource
win7-20231020-en
General
-
Target
NEAS.ce4d092871ccb80a7078aa4def5c9930.exe
-
Size
92KB
-
MD5
ce4d092871ccb80a7078aa4def5c9930
-
SHA1
b8e4420123783e49fb53a263bab141d9e0554531
-
SHA256
7c0881fae01f94031378dd9c73f4f48266a191dbd54746fc99c6406bbf519500
-
SHA512
852f8130cfaa0d2539c0a569cd79585bbbb50b2e12db969f154c92c94a3756c812c89c189b2a3c62324fecbcbae04527d92045388bc0f4d30af394cc313ddb49
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw51Mh2BTAFS:9hOmTsF93UYfwC6GIoutz5yLp1MhSD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ce4d092871ccb80a7078aa4def5c9930.exe
Files
-
NEAS.ce4d092871ccb80a7078aa4def5c9930.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE