Behavioral task
behavioral1
Sample
NEAS.86285f6239ad64be47f7b56d3fbb9730.exe
Resource
win7-20231023-en
General
-
Target
NEAS.86285f6239ad64be47f7b56d3fbb9730.exe
-
Size
6.8MB
-
MD5
86285f6239ad64be47f7b56d3fbb9730
-
SHA1
c46ac2d067ce198b755e35e35874dbd76d42ac09
-
SHA256
e9ce482df6bdc375d77ae165fbadd333f5aef3ea0947a79767132c915e603b68
-
SHA512
fc610affd40632d1aa3229153a6d218951e88afab5264b7f9e9ebc4be7280942f07c10b2e19874603ac81d6631ab9cdbc3f9403d202b4b4a1e454fe154d93521
-
SSDEEP
98304:o3bd/E+zUpE1IW2Df1zup5d92y48XMRn6m3g+5p2EwjMAC6hjCwE:qdM+51IWjT2y+Bn3zh8zGwE
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.86285f6239ad64be47f7b56d3fbb9730.exe
Files
-
NEAS.86285f6239ad64be47f7b56d3fbb9730.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ