Behavioral task
behavioral1
Sample
NEAS.fd40904063ba745c58e292eda29667c0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.fd40904063ba745c58e292eda29667c0.exe
-
Size
100KB
-
MD5
fd40904063ba745c58e292eda29667c0
-
SHA1
0472ea9a5d478de8f8b3bb1396c84f5bbe3e7d2c
-
SHA256
79ded8e9d83e66c65569cad8eabb2626205ee725ac84ded00f03443c9a135c87
-
SHA512
c76c897ae86344bc2881dbee34c1b5fa5f6e541177f933735069b6bcc70be96ff2506d66b60e689f1fac79623ed8a49171af1cc66ad9fd5ac748c6e245e2163c
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4xTS:9cm4FmowdHoSETS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fd40904063ba745c58e292eda29667c0.exe
Files
-
NEAS.fd40904063ba745c58e292eda29667c0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE