Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1e0b32779712ba84c95f6865f7eb5810.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1e0b32779712ba84c95f6865f7eb5810.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.1e0b32779712ba84c95f6865f7eb5810.exe
-
Size
163KB
-
MD5
1e0b32779712ba84c95f6865f7eb5810
-
SHA1
eed2eee8dd1504875b2a5d7f1806372d711786fa
-
SHA256
0f8cbb8399514e9ae7557878c42c16ac09ee26d593c5559af362f5a67ca2f683
-
SHA512
23a8219971aed92bbf55abd9b6cea9c672b0871f6c511e8b2069aae1aefdf7e7b12a502cab7e52cdd16f036d828c3fb7f2ff1372a4dc4eef5460fa11fe9b626a
-
SSDEEP
3072:JjnaOOgztVt+Mw3WibWH8RLZDEn5/n6l2ccz/dJEfN:Rna0Zw3WyWH8RLZDE5vhcc7d8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1e0b32779712ba84c95f6865f7eb5810.exe
Files
-
NEAS.1e0b32779712ba84c95f6865f7eb5810.exe.exe windows:1 windows x86
2f8d878a47a535c404fa597730bcdfcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertCloseStore
CryptBinaryToStringW
CertFreeCertificateContext
user32
DefWindowProcW
EnableMenuItem
GetClientRect
GetCursorPos
GetDesktopWindow
GetMenu
GetSystemMetrics
GetWindow
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetTimer
SetWindowTextW
SystemParametersInfoW
UpdateWindow
kernel32
CloseHandle
DeleteFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
GetVersionExW
LoadLibraryA
LoadLibraryW
VirtualProtect
lstrlenW
GetStartupInfoW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
gdi32
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
SetRectRgn
CreateRectRgn
Sections
AUTO Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ