Behavioral task
behavioral1
Sample
NEAS.038d6c4f02c3bd50b62bf9afe6777640.exe
Resource
win7-20231023-en
General
-
Target
NEAS.038d6c4f02c3bd50b62bf9afe6777640.exe
-
Size
289KB
-
MD5
038d6c4f02c3bd50b62bf9afe6777640
-
SHA1
26df45829e0dfc965a8474011e6f406fe550c148
-
SHA256
5465c4ade1612207b73529b0f14d6ec2e770ae24d030634b57ffbb3ccd743d99
-
SHA512
fdd76ad1c2c7f8fff1a043682da79c8d71d1880902b1081304adf3378b0b949dddab86d297986c0107720435ec80d0cb4b52f2065693a84c430fe0ae3f90df32
-
SSDEEP
6144:vgE7TPeAJSCvJmquWT52nhojpJj+mKuGoS7zvr:vRPeaJmXWF2nhwph+mYoST
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.038d6c4f02c3bd50b62bf9afe6777640.exe
Files
-
NEAS.038d6c4f02c3bd50b62bf9afe6777640.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE