Behavioral task
behavioral1
Sample
NEAS.107cb63ba85b77eb43525b6699d44050.exe
Resource
win7-20231020-en
General
-
Target
NEAS.107cb63ba85b77eb43525b6699d44050.exe
-
Size
338KB
-
MD5
107cb63ba85b77eb43525b6699d44050
-
SHA1
2742840f8e741761832b89deeb8534fbde90b0b7
-
SHA256
e4b17ebb6bf416f23f66ae378e335f4728346e3fce25c34486e31531f74461d2
-
SHA512
905671bfd2d7d2ab096163625f3cd65f3dcd3f2d8705aa72c6107d935f2987d643334843a70cf84a31b39b34b12a54b3fdfdfdb2ab589c0f79b7c6b7442adaca
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhN/l:9cm4FmowdHoS4BtguSPKyy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.107cb63ba85b77eb43525b6699d44050.exe
Files
-
NEAS.107cb63ba85b77eb43525b6699d44050.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE