Behavioral task
behavioral1
Sample
NEAS.830f4ba6080ddbbc993a0aef1a1a8d00.exe
Resource
win7-20231025-en
General
-
Target
NEAS.830f4ba6080ddbbc993a0aef1a1a8d00.exe
-
Size
73KB
-
MD5
830f4ba6080ddbbc993a0aef1a1a8d00
-
SHA1
b628cff141a0ed0304f818f3c72de033de22dfa6
-
SHA256
ef254a66c20d983c4df97d4b7d8c2112ebac21b203276902007ea5ce439c8713
-
SHA512
931d7a4f6d09883339a395a0015d7e695b5642311500a28e9426b90a4065c627e398bd8717eb2daf69e702969fe22ddde6ac32f3d182d8af41d0a3d84aa3c929
-
SSDEEP
1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8HggRepS75uJb+fc:chOmTsF93UYfwC6GIoutafJ+fc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.830f4ba6080ddbbc993a0aef1a1a8d00.exe
Files
-
NEAS.830f4ba6080ddbbc993a0aef1a1a8d00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE