Behavioral task
behavioral1
Sample
NEAS.94c72eedae9bf43922fc11511937cf70.exe
Resource
win7-20231023-en
General
-
Target
NEAS.94c72eedae9bf43922fc11511937cf70.exe
-
Size
448KB
-
MD5
94c72eedae9bf43922fc11511937cf70
-
SHA1
0dceb47989eb34162bf07c777b4cbc8086c26fb3
-
SHA256
e273db0ca1e6a47ac56a5f36030f73b168133c9f4d5414e808550d5d3ae9d9e5
-
SHA512
0b15a037a2ea0ffda0867d9ae2a8215002b7ae4fbe7104581659d75f24d0646cf314c8550900bacd54538f4dc71c7ca89825e24550eb117a4b2e5e753db306d7
-
SSDEEP
768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEma:CeT7BVwxfvLFwjRa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.94c72eedae9bf43922fc11511937cf70.exe
Files
-
NEAS.94c72eedae9bf43922fc11511937cf70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE