Behavioral task
behavioral1
Sample
NEAS.090cb387dc8e306e2e9c08a2a1d72790.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.090cb387dc8e306e2e9c08a2a1d72790.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.090cb387dc8e306e2e9c08a2a1d72790.exe
-
Size
29KB
-
MD5
090cb387dc8e306e2e9c08a2a1d72790
-
SHA1
f9bd878b7766177196a591311f137eac5fee2464
-
SHA256
836704fed7a50e178eb94fb6dfd01224138e9870f0d83b4081dd7bd0d95f735b
-
SHA512
7b4cdb404debc340eb7287ff6e7af76877d3b28ad7462336769973ae1afd2143421aa243a2c1671140a489a8cd2f041d7843f5359e704ca121130f57b407b6cc
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Atx:AEwVs+0jNDY1qi/qo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.090cb387dc8e306e2e9c08a2a1d72790.exe
Files
-
NEAS.090cb387dc8e306e2e9c08a2a1d72790.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE