Behavioral task
behavioral1
Sample
NEAS.a2807c9f3c371d3a5ea56d8342551d20.exe
Resource
win7-20231023-en
General
-
Target
NEAS.a2807c9f3c371d3a5ea56d8342551d20.exe
-
Size
68KB
-
MD5
a2807c9f3c371d3a5ea56d8342551d20
-
SHA1
48e1f7c7ad272d424baa2d76987ee48736e2dca7
-
SHA256
8d4cea102139351256bbf512103c771365f082aceb5d58f6d3b69c00590bcf84
-
SHA512
126a2182fb119775861b36678ca9708d2a95d182bfbcf30189857f781a7f4a183e824b437624896709f5a34342e260ca645cc796b63d9d4da2cb568745edc2c6
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy8q5/NV901FD9UT6Nj3:xhOmTsF93UYfwC6GIoutqVNVQQWj3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a2807c9f3c371d3a5ea56d8342551d20.exe
Files
-
NEAS.a2807c9f3c371d3a5ea56d8342551d20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE