Behavioral task
behavioral1
Sample
NEAS.80fe81cde308d7b6b792565a91206bf0.exe
Resource
win7-20231025-en
General
-
Target
NEAS.80fe81cde308d7b6b792565a91206bf0.exe
-
Size
152KB
-
MD5
80fe81cde308d7b6b792565a91206bf0
-
SHA1
c499522d4006bd50d941e93d3cbdfd16efe0eaf0
-
SHA256
300f348a8c672cf82a80855f9abbcc059fdd34062c412d466919768daedf8d8d
-
SHA512
18bb2af0a8fbd36752675d70cad3b08c02a6dd47a9310985cc776b0b99a50bed9c260788fb48c7f0532931189ca53bf237b36d93b93383d432a4208fb1ad9536
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4tFLz:kcm4FmowdHoSphraHcpOFltH4tFLz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.80fe81cde308d7b6b792565a91206bf0.exe
Files
-
NEAS.80fe81cde308d7b6b792565a91206bf0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE