Behavioral task
behavioral1
Sample
NEAS.48a0c2199ba7c5224ca71f79d1982be0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.48a0c2199ba7c5224ca71f79d1982be0.exe
-
Size
129KB
-
MD5
48a0c2199ba7c5224ca71f79d1982be0
-
SHA1
f4f39878dc00caab2fa12af8b6764dbe6278f7c8
-
SHA256
fd3beeb52dae89a6ff247c1e7acb5fe16825f09ed941b95272d1cf3a7b5ac4e8
-
SHA512
6f6833f3d4850938835bcd27f59edec7681f08368d8735b103f202cb9249a7753d37d88496e5b20c543ef22ff3d4ebbc1ff9aaa3d2fe4dfb543ab2e8d23e7ca0
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa11zoOg7ITEF+dNJm:ccm4FmowdHoS5ddWccj8IF+s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.48a0c2199ba7c5224ca71f79d1982be0.exe
Files
-
NEAS.48a0c2199ba7c5224ca71f79d1982be0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE