Behavioral task
behavioral1
Sample
NEAS.af787927c8e30cfda63b84c248125ed0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.af787927c8e30cfda63b84c248125ed0.exe
-
Size
100KB
-
MD5
af787927c8e30cfda63b84c248125ed0
-
SHA1
d74e99d75b1244af486df7aa4d50629492a57e0c
-
SHA256
8a136d1e87987a93c69b1d00a6522019a5f6b82044f2405425bf7b77363a2c5b
-
SHA512
16d5193f8262ce6483c644d17f071bacb9308ea5bdafd42e4ca33b36fd562ee6363d38ade5f5deb5ca5639765ebcc59d1b7cf045a92d826f259eb144efbfe294
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutyaVszyKd+XqQz0egJ1RdqWo:9cm4FmowdHoSyAszBd+aQz0pLo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.af787927c8e30cfda63b84c248125ed0.exe
Files
-
NEAS.af787927c8e30cfda63b84c248125ed0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE