Behavioral task
behavioral1
Sample
NEAS.b0a9a0c881f8fd91fe5058a62725f540.exe
Resource
win7-20231020-en
General
-
Target
NEAS.b0a9a0c881f8fd91fe5058a62725f540.exe
-
Size
92KB
-
MD5
b0a9a0c881f8fd91fe5058a62725f540
-
SHA1
c8a4ede73cbc5d260ad53bf1dcd3ca0e9745089b
-
SHA256
8c1ea7f1940b07487a5e3e44a0d43e1bb84eecc6cdf52ac0ece6a9c0ecc16ece
-
SHA512
f4a8c26a17136687a820309be2c5646fdb5b074a5fc8e0a4d23a957776d3b9c8b2870f2622df6837b0e825dee3e784bce677b8086ea16e235ce99e45fe18e0b7
-
SSDEEP
1536:DvQBeOGtrYS3srx93UBWfwC6Ggnouy8TLU8cJ3zOk2P5vd8FhY9f:DhOmTsF93UYfwC6GIoutpcJQ5OFhA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b0a9a0c881f8fd91fe5058a62725f540.exe
Files
-
NEAS.b0a9a0c881f8fd91fe5058a62725f540.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE