Behavioral task
behavioral1
Sample
NEAS.52af8ca0e8e0b4a8f4475a526c11c410.exe
Resource
win7-20231023-en
General
-
Target
NEAS.52af8ca0e8e0b4a8f4475a526c11c410.exe
-
Size
120KB
-
MD5
52af8ca0e8e0b4a8f4475a526c11c410
-
SHA1
8343acd9592245af1454e251193974964a598131
-
SHA256
8302323877e06dbe26734eae3b722d768acce5c1bdf598beb5b088f7c6808323
-
SHA512
7ffb22bb177584d616404fbdf8674a2e329d944717b48c1316837f9fe61a507c1b31cfae8825b2e88d232063f3680b557434f09c9061b92f110841d03c6f00f8
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BoaK3:kcm4FmowdHoSphraHcpOraM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.52af8ca0e8e0b4a8f4475a526c11c410.exe
Files
-
NEAS.52af8ca0e8e0b4a8f4475a526c11c410.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE