Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6a0e0c755985bd11b29aaac222a910c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6a0e0c755985bd11b29aaac222a910c0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6a0e0c755985bd11b29aaac222a910c0.exe
-
Size
164KB
-
MD5
6a0e0c755985bd11b29aaac222a910c0
-
SHA1
eec04f658ac394e30e995c032b32d8537795fab6
-
SHA256
2655ec25ce6fdf24fe3f616dfd5b01ed9bd2d792f266b5168307b93d600e7936
-
SHA512
e08efd0fe5d87ce925bf6f1ad26830540ed525268d80230d915e9f837830b0286018ecfcef083a49f2d606c615952f7df3cfdc6ad808ef265538b6354ada81de
-
SSDEEP
3072:jYNYDPZZyNw8NLfgWmJ5xVoy0eJ9J1/y74GTPhd6xHHHZX3cy0K0:jYNYtoSJDW09J1si589v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6a0e0c755985bd11b29aaac222a910c0.exe
Files
-
NEAS.6a0e0c755985bd11b29aaac222a910c0.exe.exe windows:4 windows x86
a5186c2e63539cbcc846c6db660ccbee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocStringLen
SafeArrayGetElement
SafeArrayUnaccessData
VariantCopyInd
GetErrorInfo
SafeArrayGetUBound
VariantChangeType
SysStringLen
SysFreeString
user32
EndPaint
BeginDeferWindowPos
GetCapture
ShowWindow
EnableWindow
CharLowerBuffA
CharNextA
MessageBoxA
GetIconInfo
RegisterClassA
FillRect
DeferWindowPos
GetSysColorBrush
DrawMenuBar
GetClientRect
GetClassLongA
CreateIcon
SetWindowPos
DispatchMessageA
GetDC
GetClassInfoA
GetActiveWindow
CreatePopupMenu
GetMenuItemInfoA
SetWindowLongA
IsWindowEnabled
ClientToScreen
GetDesktopWindow
GetPropA
EnableScrollBar
SystemParametersInfoA
GetMessagePos
DefMDIChildProcA
GetCursorPos
IsDialogMessageA
GetLastActivePopup
EnumChildWindows
DispatchMessageW
SetCursor
GetScrollPos
GetKeyNameTextA
EndDeferWindowPos
DrawFrameControl
GetForegroundWindow
GetMenuState
SetTimer
TrackPopupMenu
CharLowerA
HideCaret
FrameRect
GetWindow
DrawTextA
CreateWindowExA
GetWindowTextA
CallWindowProcA
GetMenu
EqualRect
CharToOemA
ShowScrollBar
DrawEdge
EnumThreadWindows
EnableMenuItem
IsWindowVisible
IsMenu
GetCursor
SetWindowTextA
CreateMenu
GetSysColor
GetMenuStringA
GetDCEx
IsChild
DrawIcon
GetMenuItemID
GetDlgItem
DrawIconEx
GetSubMenu
GetFocus
BeginPaint
CallNextHookEx
EnumWindows
DefFrameProcA
FindWindowA
GetParent
GetClipboardData
GetKeyState
kernel32
FormatMessageA
GetProcessHeap
FreeResource
SizeofResource
GetDateFormatA
GetSystemDefaultLangID
GetFileSize
CreateThread
LocalFree
VirtualFree
LoadLibraryExA
GetLocaleInfoA
GetCurrentProcessId
LocalAlloc
HeapDestroy
ExitThread
ExitProcess
SetErrorMode
GetStringTypeW
SetEndOfFile
GetStdHandle
GetLastError
GetCurrentProcess
CreateFileA
RaiseException
GlobalAlloc
FreeLibrary
HeapFree
GetCPInfo
GetEnvironmentStrings
GetVersion
lstrcpyA
GetCurrentThreadId
GlobalAddAtomA
GetModuleHandleA
GetFileType
GetStartupInfoA
SetEvent
SetThreadLocale
FindFirstFileA
FindClose
GetCommandLineA
VirtualAllocEx
GetProcAddress
SetLastError
ReadFile
VirtualAlloc
GetOEMCP
DeleteFileA
Sleep
LocalReAlloc
msvcrt
srand
wcstol
wcscspn
memcpy
atol
calloc
clock
strlen
tolower
wcschr
time
memset
wcsncmp
rand
mbstowcs
sprintf
swprintf
exit
memmove
malloc
sqrt
Sections
CODE Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ