Behavioral task
behavioral1
Sample
NEAS.0e9c5fa88a0271d6bb8d184cf5862b90.exe
Resource
win7-20231023-en
General
-
Target
NEAS.0e9c5fa88a0271d6bb8d184cf5862b90.exe
-
Size
481KB
-
MD5
0e9c5fa88a0271d6bb8d184cf5862b90
-
SHA1
0c6fe53faa566c11955c20912eb3fe16b1b5b2f7
-
SHA256
baef0369cf5f05587ad4fa4d683e1ba4ddc4c6790f59d8ff27a33d8c6d22eb71
-
SHA512
50c0f0d2b4902f1a8d092f2d5eac65170978384de64156aa9ee4265087c4b94eb6e483d05b322f792cd8947f76b73b47ca3c62ab05a1f2b79207fd08bbeee60a
-
SSDEEP
6144:xcm4FmowdHoSkhraHcpOFltH4t+IDvSXrh5g8hZTydOAkOCOu0EajNVBZr6y2WXh:74wFHoSceFp3IDvSbh5nP+aY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0e9c5fa88a0271d6bb8d184cf5862b90.exe
Files
-
NEAS.0e9c5fa88a0271d6bb8d184cf5862b90.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ