Behavioral task
behavioral1
Sample
NEAS.68481514f3bfef34b0f8945257f41280.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.68481514f3bfef34b0f8945257f41280.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.68481514f3bfef34b0f8945257f41280.exe
-
Size
148KB
-
MD5
68481514f3bfef34b0f8945257f41280
-
SHA1
ba64fcd5112ac8f1f31745b5fcdc31bcdf1ec457
-
SHA256
b45fc222ea4347d9f2e1223b0e016fb0aa8f7ad0436786a8c018282b90ad0752
-
SHA512
f85a9c6611f7d12d33027087d7ae84e6e74a05446a7d825a5a75f19ab7e1bc70c66404dd6fcc5624ac52e7b58e264371310f58f60fbf88be689ad5fdf81397f2
-
SSDEEP
3072:jwkJxyDlun/QMQ73DcHphKcwQZq47eT/3GjPLcHb3aT8YKQ:5xclurucHKaZq47eyjPwqT8/Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.68481514f3bfef34b0f8945257f41280.exe
Files
-
NEAS.68481514f3bfef34b0f8945257f41280.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE