Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a7141e95d3696810f6e494a731401680.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a7141e95d3696810f6e494a731401680.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a7141e95d3696810f6e494a731401680.exe
-
Size
192KB
-
MD5
a7141e95d3696810f6e494a731401680
-
SHA1
4a77f2b975c669e8d3660a91af30d891829edc27
-
SHA256
851381614fffcb327e67f67f20a3b8aadfb9aeaa5f0bd2770247f04952d9d634
-
SHA512
602092b7afb6c0454dd5b93d170170554c5c99c37bf975da5944bea09f017e61cfb7c597219bd3b04205433e0b7fb21d1ba3a0fc1ae0bd5109ffbb50fbc1723a
-
SSDEEP
1536:Iy5Rh+r9ol2w/WCDfBb0WWvgBspwe6NjvSGqsEIY83oKO21o:IohsO2a3DfB4WWokZ6NjvSNkoKO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a7141e95d3696810f6e494a731401680.exe
Files
-
NEAS.a7141e95d3696810f6e494a731401680.exe.exe windows:4 windows x86
0019aa4aac73729357b65fc26febaf27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
SetFilePointer
SetStdHandle
FlushFileBuffers
HeapReAlloc
HeapAlloc
SetConsoleCtrlHandler
GetLastError
RtlUnwind
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
CloseHandle
user32
GetDC
PostQuitMessage
DefWindowProcA
PeekMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
MessageBoxA
LoadCursorA
LoadIconA
RegisterClassA
GetSystemMetrics
AdjustWindowRectEx
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
GetStockObject
opengl32
wglDeleteContext
glClearColor
glClear
glFlush
glViewport
glMatrixMode
glLoadIdentity
wglCreateContext
wglMakeCurrent
glu32
gluPerspective
Sections
.text Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ