Behavioral task
behavioral1
Sample
NEAS.1c881abcc02198e18d31143894d7b700.exe
Resource
win7-20231020-en
General
-
Target
NEAS.1c881abcc02198e18d31143894d7b700.exe
-
Size
351KB
-
MD5
1c881abcc02198e18d31143894d7b700
-
SHA1
c86a665816a81d8503239cbf8aa475dd27a77683
-
SHA256
77afd8d7d3d0cd4b766ebd4d5b49fb2f64a27be61ef5ba2de7828dfba48896ee
-
SHA512
aa04805d7808d1a1ff821f494b6ed53bdc0bce6797380c912ff420d73ab5938f4d78ff6efee44cd22cdd119ac9ff51ae67e6702756ba7b1a946239d818bbb132
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1YRMxlg/GwC6GKRE8vFXUIAIERGABdIAO:ccm4FmowdHoS5ddWhROAGwdZopQUeJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1c881abcc02198e18d31143894d7b700.exe
Files
-
NEAS.1c881abcc02198e18d31143894d7b700.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE