Static task
static1
Behavioral task
behavioral1
Sample
NEAS.69af63b2d6b9dc34cdd843da16c9f7e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.69af63b2d6b9dc34cdd843da16c9f7e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.69af63b2d6b9dc34cdd843da16c9f7e0.exe
-
Size
128KB
-
MD5
69af63b2d6b9dc34cdd843da16c9f7e0
-
SHA1
4a2b5e5ceb5e5a615715e1336b67a0c4524e2bc3
-
SHA256
ab1925d00a9bd4eb9bc87db38fdd4ef5edee65f4e2f31a371a0ce68fbe2fc58a
-
SHA512
288b154a2e96182894ea57c0763f44f1963f943f2bbc68d2ad48bfbe00544f66c8305b8b98e4c362fbebb2c590edd4f54b08ba7688b013f32c9b49a98b20da52
-
SSDEEP
3072:scNnhEXCiB2yrRSjPPXthcnlR+VnNY9rme3iwfVknO45rbL:pnhMR23tqDMame3yL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.69af63b2d6b9dc34cdd843da16c9f7e0.exe
Files
-
NEAS.69af63b2d6b9dc34cdd843da16c9f7e0.exe.exe windows:5 windows x86
bece26e9cb310ee4aee2ada3ff11f659
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSACleanup
wininet
InternetOpenA
InternetCloseHandle
FtpPutFileA
InternetConnectA
comctl32
InitCommonControlsEx
kernel32
WriteConsoleW
LCMapStringA
lstrlenA
lstrcpyA
CloseHandle
GetFileSize
CreateFileA
FindClose
FindNextFileA
CompareFileTime
MoveFileExA
GetLastError
CopyFileA
Sleep
FileTimeToSystemTime
lstrcmpA
FindFirstFileA
GetLocalTime
ReleaseMutex
GetExitCodeThread
CreateThread
WaitForSingleObject
CreateMutexA
WriteFile
SetFilePointer
GetPrivateProfileIntA
GetPrivateProfileStringA
SearchPathA
FindNextChangeNotification
FindFirstChangeNotificationA
DeleteFileA
SystemTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
GetFileTime
CancelWaitableTimer
SleepEx
SetWaitableTimer
SetEndOfFile
GetEnvironmentVariableA
OpenMutexA
RemoveDirectoryA
CreateDirectoryA
HeapAlloc
GetProcessHeap
InitializeCriticalSection
LeaveCriticalSection
HeapFree
EnterCriticalSection
FlushFileBuffers
WriteConsoleA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
ReadFile
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTickCount
GetConsoleOutputCP
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
CompareStringA
CompareStringW
CreateWaitableTimerA
SetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
user32
UpdateWindow
SetFocus
GetWindowTextA
FindWindowExA
SetDlgItemTextA
CheckDlgButton
EnableWindow
InvalidateRect
CallWindowProcA
SetWindowLongA
ShowWindow
LoadIconA
DialogBoxParamA
GetSystemMetrics
LoadImageA
RegisterWindowMessageA
DefWindowProcA
GetWindowLongA
SetForegroundWindow
PostMessageA
MessageBoxA
EndDialog
SendMessageA
GetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
wvsprintfA
wsprintfA
IsDlgButtonChecked
gdi32
DeleteObject
CreateFontA
GetStockObject
SetBkColor
CreateSolidBrush
shell32
Shell_NotifyIconA
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ