Behavioral task
behavioral1
Sample
NEAS.3e7be2019d65371ac5d1a74ff29bef10.exe
Resource
win7-20231025-en
General
-
Target
NEAS.3e7be2019d65371ac5d1a74ff29bef10.exe
-
Size
447KB
-
MD5
3e7be2019d65371ac5d1a74ff29bef10
-
SHA1
dd68d2088b9cc2eaae9f6ba720c1a7661e2c8418
-
SHA256
8b87d91f5fe83bf28478c0796489fec151ab95e650d4ef1c02ca134ab6fca751
-
SHA512
cddefcf1f14cb278ebbc8d0ffd9ff04a65a1e4ad7ab0e386c31fe900ebb3a807772e9aa53045c842df185b866275f26182353c0577e4a5b195967edfa19e30bf
-
SSDEEP
768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmM:CeT7BVwxfvLFwjRM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3e7be2019d65371ac5d1a74ff29bef10.exe
Files
-
NEAS.3e7be2019d65371ac5d1a74ff29bef10.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE