Behavioral task
behavioral1
Sample
NEAS.9e779a174ac00b9f197cf65eb5f187b0.exe
Resource
win7-20231025-en
General
-
Target
NEAS.9e779a174ac00b9f197cf65eb5f187b0.exe
-
Size
49KB
-
MD5
9e779a174ac00b9f197cf65eb5f187b0
-
SHA1
e75299762e6a51a1e40f4d1d0eba8c99df614830
-
SHA256
66dd23461a7c082249e99bff71b2d3584fd8443576b60dade19104466fea163b
-
SHA512
248dcbb71e2fb989d5405354cf9f072008b5cdad6fe30518d2e6c7b2978f0ce599b611c2da956304329e1c771d774fb83aa2a12f83abf3d2f46248352f4ab07d
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNwaMECKU:khOmTsF93UYfwC6GIoutpY71EC5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9e779a174ac00b9f197cf65eb5f187b0.exe
Files
-
NEAS.9e779a174ac00b9f197cf65eb5f187b0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE