Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6e99c649091131eca7e1a9a969296040.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6e99c649091131eca7e1a9a969296040.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6e99c649091131eca7e1a9a969296040.exe
-
Size
6.2MB
-
MD5
6e99c649091131eca7e1a9a969296040
-
SHA1
75f65f6063092b8d8cc0d5ae91d69ed847f36864
-
SHA256
3778b40059346d1891055b6ed255ddbc74adcb501165f75d6f26478b41894d9e
-
SHA512
8ea5bd8c78de685cd69eebce2c3576a9a465e0fc78e723ac2b7531e37b71290ea96ce8153f389d1f3f563877643d1fe8101176fd5e5d294c9ee6475ac9a55b5f
-
SSDEEP
196608:ThuNaCjjs0aNGTe8liY6zRlHsLhF390DqG:ThvC0Ue5TW1rG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6e99c649091131eca7e1a9a969296040.exe
Files
-
NEAS.6e99c649091131eca7e1a9a969296040.exe.exe windows:5 windows x86
6b9d6fcb5c75887955db92e3186fe387
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
lstrlenW
lstrcpynW
CloseHandle
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
WriteFile
ReadFile
IsDebuggerPresent
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetDiskFreeSpaceW
MulDiv
user32
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
GetClassInfoW
CreateWindowExW
SystemParametersInfoW
LoadBitmapW
SetDlgItemTextW
GetDlgItemTextW
CharUpperW
DispatchMessageW
PeekMessageW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
SetCursor
GetWindowLongW
GetSysColor
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
PostQuitMessage
IsWindowVisible
CallWindowProcW
GetMessagePos
ScreenToClient
CheckDlgButton
RegisterClassW
LoadCursorW
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EndPaint
DrawTextW
FillRect
GetClientRect
SetWindowTextW
gdi32
SetBkColor
GetDeviceCaps
CreateBrushIndirect
DeleteObject
CreateFontIndirectW
SetBkMode
SelectObject
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ord17
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.no7ri Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ