Behavioral task
behavioral1
Sample
NEAS.9e006bcee718cec7dcbb371732c56310.exe
Resource
win7-20231020-en
General
-
Target
NEAS.9e006bcee718cec7dcbb371732c56310.exe
-
Size
447KB
-
MD5
9e006bcee718cec7dcbb371732c56310
-
SHA1
3011e5a00a3a61dbc7ef8cf50ee03b42ccaaa0b5
-
SHA256
4dc1a676ae6e39b43745214ddf1cb1c239544244bd40a68074ca31ed815a9f6c
-
SHA512
21737cae020e951ac8f777a78659c980a7bbcb84ec76e8da4e0a4be883bf03052bcbb72a05f0c1d8fe39d9a3e8b395e8b9d3709a4d1e9a3bd37a1fc2dd019bd9
-
SSDEEP
768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEm+:CeT7BVwxfvLFwjR+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9e006bcee718cec7dcbb371732c56310.exe
Files
-
NEAS.9e006bcee718cec7dcbb371732c56310.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE