Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7fc9a329cb245d1b8f6192a2c9aaf740.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.7fc9a329cb245d1b8f6192a2c9aaf740.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.7fc9a329cb245d1b8f6192a2c9aaf740.exe
-
Size
309KB
-
MD5
7fc9a329cb245d1b8f6192a2c9aaf740
-
SHA1
dc69377ce1d38bc20ac6badb8681ecfff897ad75
-
SHA256
aff03287d3b5ecb57d5b10ae0d725c742a206ca82f52c79028e28ab8fcbcf072
-
SHA512
0d2c7d1b6006f2351011e86e200aacf7c91078864c3cbe424313ca190ab2226f7fe77020dd36ff4c857b8ecaebec62f79e17beb822b04363c567015eea703d4c
-
SSDEEP
6144:kCgU2rSrKFWwoPqFFa6jZVZ6MutBWHoEy2sM/ncd7B/G:L2W+FWwSya6jZH/AEP/e75G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7fc9a329cb245d1b8f6192a2c9aaf740.exe
Files
-
NEAS.7fc9a329cb245d1b8f6192a2c9aaf740.exe.exe windows:4 windows x86
68b57116dfd85a77f992d500bba23621
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetTimeZoneInformation
HeapDestroy
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
RaiseException
HeapCreate
VirtualFree
GetVolumeInformationA
VirtualAlloc
GetStartupInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrlenA
GlobalUnlock
GlobalFree
LockResource
GetCommandLineA
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
RtlUnwind
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetFileSize
GetFileTime
GetVersionExA
GetFileAttributesA
GetModuleHandleA
SetLastError
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
TlsGetValue
GlobalFlags
EnterCriticalSection
LocalReAlloc
TlsSetValue
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
LocalFree
GetModuleFileNameA
lstrcpynA
GetFullPathNameA
SetUnhandledExceptionFilter
FindFirstFileA
FindClose
FindResourceA
lstrcpyA
IsBadReadPtr
FreeLibrary
LoadResource
LoadLibraryA
GetCurrentThreadId
GetProcAddress
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
MulDiv
GetLastError
IsBadWritePtr
GetVersion
IsBadCodePtr
LCMapStringW
GlobalLock
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GetProfileStringA
CloseHandle
user32
IsDialogMessageA
ShowWindow
wvsprintfA
LoadStringA
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetAsyncKeyState
SetWindowTextA
LoadCursorA
ReleaseCapture
GetDesktopWindow
WindowFromPoint
ClientToScreen
GetClassNameA
PtInRect
GetSysColorBrush
MapDialogRect
CharUpperA
InflateRect
InvalidateRect
OffsetRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
IntersectRect
FindWindowA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
GetWindowTextLengthA
GetClassInfoA
RegisterClassA
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
CreateWindowExA
GetMenu
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
CharNextA
UnregisterClassA
DrawFocusRect
ShowCaret
HideCaret
gdi32
CreateBitmap
SetTextColor
SetBkColor
DeleteDC
GetObjectA
RestoreDC
SelectObject
SaveDC
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
GetTextExtentPointA
ExtTextOutA
CreateDIBitmap
CreateCompatibleDC
BitBlt
ScaleViewportExtEx
PatBlt
SetViewportExtEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
shell32
DragQueryFileA
SHBrowseForFolderA
DragFinish
SHGetPathFromIDListA
comctl32
DestroyPropertySheetPage
ord17
PropertySheetA
CreatePropertySheetPageA
ImageList_Destroy
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE