Behavioral task
behavioral1
Sample
NEAS.2940790630403cb867cabcd163791ab0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.2940790630403cb867cabcd163791ab0.exe
-
Size
105KB
-
MD5
2940790630403cb867cabcd163791ab0
-
SHA1
f1e105a96da8bbd6cab26bf417428c7175e86ed2
-
SHA256
5e13d28b4b01c5e5b65028ddcdc76c33991d242323956097deadeceb99d32e53
-
SHA512
ff5bd8faec305bb039b065d0e2d9d2f3f1e29ad1894947e02e1172ad43b6696a795cbe969f184c816b4c9050608e62f2fbdac3a3f207bdcb2078ae599553cf3b
-
SSDEEP
3072:/hOmTsF93UYfwC6GIoutKzdbr9XcMRwkPGT5:/cm4FmowdHoSKZf5cXYo5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2940790630403cb867cabcd163791ab0.exe
Files
-
NEAS.2940790630403cb867cabcd163791ab0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE