Behavioral task
behavioral1
Sample
NEAS.85f5baa526d15f4a1cfd53b24c5d65e0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.85f5baa526d15f4a1cfd53b24c5d65e0.exe
-
Size
488KB
-
MD5
85f5baa526d15f4a1cfd53b24c5d65e0
-
SHA1
c4b941910bfc024806d5bbe0bfef4d2358feeff6
-
SHA256
b78e09a414b8cdd11d49f2790184346d0c0011d5a303d18b7d033d8b4fb092c8
-
SHA512
b906468baa7562ca2986c9bdbd755f3539ac0422feac719c2e49bed3cf1ae330a026d896ca1a9e4e28f567a614bad8584e9e70da9c521517ff3bb98255f8e522
-
SSDEEP
12288:VcXUN973paI/F9jpUpBzTAJNUdglNURD1xo9xxb3qkqcE6fKQq:WEN973phvt8tmUdkw1xo9xtacE09q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.85f5baa526d15f4a1cfd53b24c5d65e0.exe
Files
-
NEAS.85f5baa526d15f4a1cfd53b24c5d65e0.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 479KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE