Behavioral task
behavioral1
Sample
NEAS.970108f06988178985ee03d64f004300.exe
Resource
win7-20231023-en
General
-
Target
NEAS.970108f06988178985ee03d64f004300.exe
-
Size
9.6MB
-
MD5
970108f06988178985ee03d64f004300
-
SHA1
2f9508b5e9806f11db5b23c71ec799c80d472b42
-
SHA256
c4a2b24bc9b72c5d26514c49b4d79deb94c0b9784a6272eab9284c3a85032d08
-
SHA512
22e5700fd94a80da2e920f2e12144f69a2c64c0f54252ca1d699ffa1c01ba78581e457855069a8cb07ef4548ec187e26916e0479295b20b9b3911db9da4d8068
-
SSDEEP
196608:0gIQkm+Rxt7o3WuRuY1VDWuZuY1VDWuRuY1V07qJZQl5CXfQ1/ta5:0Ukm+Pdo3WuRuY1VDWuZuY1VDWuRuY1n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.970108f06988178985ee03d64f004300.exe
Files
-
NEAS.970108f06988178985ee03d64f004300.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE