Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7b399e037d6acbd561c1194602fcfa60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.7b399e037d6acbd561c1194602fcfa60.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.7b399e037d6acbd561c1194602fcfa60.exe
-
Size
132KB
-
MD5
7b399e037d6acbd561c1194602fcfa60
-
SHA1
40d95e7040011bb0107cc40c378e1269aca49de4
-
SHA256
21dc77dcf08e33389d5ed08a62f8f0d348f3919ef958a0d4f61b4a2fc0d2a32d
-
SHA512
7bb5a3fe18a6adb9cb7eb411136e767b6e7b2969a1773ac4321ff5fd08849e864284c6624e466d5c75c1c033fa781d51368c26921559ba5bc693a7f04e12bb37
-
SSDEEP
3072:PPmS80sci4JEqdPZtSYdQ26XeO6uarn9UbkrSmr:mS8ZrQ3eXeO6uarnC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7b399e037d6acbd561c1194602fcfa60.exe
Files
-
NEAS.7b399e037d6acbd561c1194602fcfa60.exe.exe windows:4 windows x86
59434fb68fb07aec8c9ef033fe52c871
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LocalFree
GlobalAlloc
GetModuleHandleA
VirtualAllocEx
GetThreadLocale
GetFullPathNameA
GetProcAddress
CreateFileA
FreeLibrary
GetOEMCP
RaiseException
GlobalAddAtomA
LoadLibraryExA
EnumCalendarInfoA
GetVersionExA
user32
LoadKeyboardLayoutA
SetRect
GetScrollPos
DispatchMessageW
SetPropA
FillRect
ActivateKeyboardLayout
ReleaseDC
GetClassNameA
SetWindowLongA
GetCursorPos
TranslateMessage
SetWindowPos
DestroyCursor
GetClipboardData
IsIconic
GetFocus
DrawIcon
DestroyWindow
LoadStringA
IsZoomed
GetSysColorBrush
DrawIconEx
IsRectEmpty
GetWindowPlacement
SetWindowTextA
SetParent
GetSubMenu
DrawAnimatedRects
GetCursor
SetScrollRange
IsWindowEnabled
EmptyClipboard
SetActiveWindow
GetForegroundWindow
CreateWindowExA
GetSystemMenu
CharLowerA
GetMenuItemCount
KillTimer
DrawMenuBar
GetClientRect
IntersectRect
MessageBoxA
GetMenu
ClientToScreen
OemToCharA
UnregisterClassA
DefWindowProcA
PostMessageA
GetKeyState
GetIconInfo
RegisterWindowMessageA
SendMessageA
MoveWindow
PeekMessageA
OpenClipboard
GetScrollInfo
DestroyIcon
IsWindow
SetScrollPos
SendMessageW
CheckMenuItem
GetMenuItemID
PtInRect
RedrawWindow
CallWindowProcA
DrawFrameControl
LoadBitmapA
SetMenuItemInfoA
GetMenuState
SetCapture
ChildWindowFromPoint
RegisterClassA
IsWindowVisible
InflateRect
OffsetRect
SetForegroundWindow
MapVirtualKeyA
GetWindowLongA
GetCapture
GetWindowDC
FrameRect
IsChild
IsDialogMessageA
SetMenu
PeekMessageW
MessageBeep
InvalidateRect
GetMenuItemInfoA
GetWindowThreadProcessId
GetClassInfoA
MapWindowPoints
GetSysColor
CreatePopupMenu
ShowWindow
CharToOemA
CharUpperBuffA
RemoveMenu
GetKeyboardLayout
FindWindowA
GetDlgItem
GetSystemMetrics
EnumThreadWindows
DeleteMenu
SetTimer
GetKeyNameTextA
CreateIcon
SetWindowPlacement
GetParent
SystemParametersInfoA
IsDialogMessageW
WindowFromPoint
GetScrollRange
DispatchMessageA
UpdateWindow
GetDesktopWindow
TranslateMDISysAccel
GetTopWindow
CharLowerBuffA
EnableWindow
WaitMessage
EnumChildWindows
GetWindowRect
GetPropA
GetMenuStringA
ReleaseCapture
GetWindowLongW
GetKeyboardState
LoadCursorA
SetClipboardData
CreateMenu
SetFocus
CharNextW
LoadIconA
SetScrollInfo
EnableMenuItem
ScreenToClient
CharNextA
GetActiveWindow
DestroyMenu
GetDC
DefFrameProcA
ScrollWindow
GetDCEx
ShowOwnedPopups
wsprintfA
SetWindowLongW
RegisterClipboardFormatA
GetWindow
InsertMenuItemA
CloseClipboard
SetClassLongA
MsgWaitForMultipleObjects
EnumWindows
EnableScrollBar
PostQuitMessage
GetWindowTextA
AdjustWindowRectEx
GetKeyboardLayoutNameA
GetLastActivePopup
SetCursor
EndPaint
IsWindowUnicode
DrawEdge
RemovePropA
DefMDIChildProcA
CallNextHookEx
BeginPaint
GetKeyboardLayoutList
SetWindowsHookExA
ShowScrollBar
GetMessagePos
UnhookWindowsHookEx
version
GetFileVersionInfoA
VerFindFileA
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 538B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ