Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8777a8ff0df86304232cee926de09f30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.8777a8ff0df86304232cee926de09f30.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.8777a8ff0df86304232cee926de09f30.exe
-
Size
46KB
-
MD5
8777a8ff0df86304232cee926de09f30
-
SHA1
627cccf5c04636d9b22185323c2d124141a5541e
-
SHA256
13b9a2922749857a54732723f1d13b95f76677548f0610621517a0179b3d39c4
-
SHA512
9be712623143f6a6770e60d188e08abd479055c68c92e73d00c7da229c0ee211ac8dec57a81cf86e0c307363590382801cb2ea60e1814154948095a50f51a462
-
SSDEEP
192:NoQGoSzlYWpiqfd/YK4HED1XT8uGagB5ycdTUgS5CWWpW:NoEgJ4WXgslc9UvUWWpW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8777a8ff0df86304232cee926de09f30.exe
Files
-
NEAS.8777a8ff0df86304232cee926de09f30.exe.exe windows:5 windows x86
9deea3c6b0ddb4635e5508f30c1b315d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
kernel32
GetVersionExA
GetACP
GetProcAddress
GetModuleHandleA
CloseHandle
ExitProcess
GetCommandLineA
GetStartupInfoA
ResetEvent
lstrcmpiA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
CreateEventA
LocalFree
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
user32
EnumWindows
GetClassNameA
FindWindowA
SetWindowPos
PostMessageA
KillTimer
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
SetTimer
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
GetSystemMetrics
msctf
TF_UninitSystem
TF_CreateCicLoadMutex
TF_InvalidAssemblyListCache
TF_PostAllThreadMsg
TF_InitSystem
msutb
ClosePopupTipbar
GetPopupTipbar
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ