Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d0768ac4ed5fe0a850a509bd2716b5e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d0768ac4ed5fe0a850a509bd2716b5e0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d0768ac4ed5fe0a850a509bd2716b5e0.exe
-
Size
21KB
-
MD5
d0768ac4ed5fe0a850a509bd2716b5e0
-
SHA1
a7e46987f40b3c3a0d0583b421192db7ff6a219b
-
SHA256
a61946a35fd2f6f650de4e3bb38c04e44502e73d9a079f6d8c96cee26877cc01
-
SHA512
fb4ef4d61a1275bc03735c2ff656432b7f637e50381fc654071e1b718e8aa008d9bc58226d0b24169567845ef6bfd7e7acbc31c93c2d8ca5f29aa37bf2c54b8f
-
SSDEEP
384:tLHsL4m3fKSelxP1jSmD2KPy1LWlvK8/r:tYLLPKtRDDlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d0768ac4ed5fe0a850a509bd2716b5e0.exe
Files
-
NEAS.d0768ac4ed5fe0a850a509bd2716b5e0.exe.exe windows:4 windows x86
adebbb86b5e51804d4a099487dedb258
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
HeapAlloc
IsBadReadPtr
CreateDirectoryW
GlobalUnlock
GlobalLock
GetModuleHandleA
user32
GetMessageA
CreateMenu
GetSystemMenu
GetClipboardOwner
FindWindowA
MessageBoxIndirectA
WinHelpA
InvalidateRect
SetWindowPos
GetClientRect
BeginPaint
SetWindowTextA
MsgWaitForMultipleObjects
IsWindow
CreateCaret
ShowCaret
HideCaret
DestroyCaret
EnableMenuItem
GetCursorPos
TrackPopupMenu
GetScrollInfo
ScreenToClient
GetKeyboardLayout
SetKeyboardState
ToUnicodeEx
ToAsciiEx
SetScrollInfo
GetMessageTime
PostMessageA
CheckMenuItem
FlashWindow
SetCaretPos
GetKeyboardState
LoadIconA
RegisterClassA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ