Behavioral task
behavioral1
Sample
NEAS.1fa54ce4de1cbe8db55e2cceaadf35d0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.1fa54ce4de1cbe8db55e2cceaadf35d0.exe
-
Size
132KB
-
MD5
1fa54ce4de1cbe8db55e2cceaadf35d0
-
SHA1
40726f97d0e1d51d3ab663bd0b7718b460631e7d
-
SHA256
9fb2d8c4dd5fc8053e0f5950dbb6302069a6a0012965e3adc9c3bf485bb45ed6
-
SHA512
787b43c7ccb81aa89cc41ae3a201cc910dbd4261b1ff51083182f8aeaf930412f8555f40428cd512b11c8252f0ede42a8f51629042b67e344753f9268fee1b69
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JjKdAc:9cm4FmowdHoS4WT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1fa54ce4de1cbe8db55e2cceaadf35d0.exe
Files
-
NEAS.1fa54ce4de1cbe8db55e2cceaadf35d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE