Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e7e027baad242910a3306be29e22cf00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e7e027baad242910a3306be29e22cf00.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e7e027baad242910a3306be29e22cf00.exe
-
Size
6.4MB
-
MD5
e7e027baad242910a3306be29e22cf00
-
SHA1
028e9b014ecea74297bb7963375968d61d25cd5c
-
SHA256
61948d24c0be86da6a1a8d54a8b48970d0dafba1f218192ce36015f595693e77
-
SHA512
ebffb125464b9c0f084fda6556365c29cb445b7bad50d1ca735bca016e70c1b21cb8b7adbaa5965140d281b7d942609ec3287746258f41272cc87c910f5365b7
-
SSDEEP
98304:B1ngHM8BWzZxqb6rYyHYQ/rOnVZhFLOAkGkzdnEVEFoKG:BVgHVQ/rOnThFLOyEFoKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e7e027baad242910a3306be29e22cf00.exe
Files
-
NEAS.e7e027baad242910a3306be29e22cf00.exe.exe windows:5 windows x86
5dddae83cebe79f5c908be7422b8c382
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertSetCertificateContextProperty
CertFreeCertificateContext
CertOpenSystemStoreA
CertCreateCertificateContext
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CertGetNameStringA
CertFindCertificateInStore
CertCloseStore
jit_usbkey
?USBKey_GetKeyType@@YAKEPAEPAPAX@Z
?USBKey_GetSNO@@YAKPAXPAEPAK@Z
?USBKey_GetContainerName@@YGKPAXEPADPAEPAK@Z
?USBKey_ReadCertByIndex@@YAKPAXKPAEPAK@Z
?USBKey_Disconnect@@YGKPAPAX@Z
kernel32
GetPrivateProfileStringA
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WinExec
MultiByteToWideChar
GetACP
FindResourceA
SizeofResource
LockResource
LoadResource
GetPrivateProfileIntA
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetProcAddress
GetModuleHandleA
LoadLibraryExA
GetLocaleInfoA
GetCurrentThreadId
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
FreeLibrary
GlobalAlloc
InterlockedExchange
CompareStringA
CloseHandle
CreateMutexA
GetLastError
WideCharToMultiByte
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetProcessHeap
GetConsoleMode
GetConsoleCP
CompareStringW
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
IsDebuggerPresent
SetStdHandle
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitThread
CreateThread
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
RaiseException
RtlUnwind
ExitProcess
LocalLock
LocalUnlock
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
SetFileAttributesA
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileSizeEx
LoadLibraryW
GetSystemDirectoryW
FindResourceExA
GetDiskFreeSpaceA
GetFileTime
SetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetModuleHandleW
GetTempPathA
GetTempFileNameA
SearchPathA
GetTickCount
ResetEvent
PulseEvent
GetOEMCP
GetCPInfo
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetProfileIntA
VirtualProtect
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InterlockedIncrement
GetCurrentDirectoryA
InterlockedDecrement
GetModuleFileNameW
GetAtomNameA
SetErrorMode
GlobalFlags
lstrlenW
CopyFileA
FormatMessageA
LocalFree
lstrcpyA
GlobalReAlloc
GlobalSize
CreateFileA
GetFileSize
GetFileAttributesA
MulDiv
WritePrivateProfileStringA
ResumeThread
GetThreadPriority
SetThreadPriority
LoadLibraryA
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
lstrlenA
SetLastError
GetCurrentProcessId
GlobalAddAtomA
user32
CopyAcceleratorTableA
CreateAcceleratorTableA
DestroyAcceleratorTable
RegisterClipboardFormatA
SetClassLongA
DrawIconEx
MapVirtualKeyA
GetKeyNameTextA
GetClipboardFormatNameA
SetRectEmpty
GetDialogBaseUnits
CharUpperBuffA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
SetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
IsMenu
GetMenuItemInfoA
NotifyWinEvent
CharUpperA
MessageBeep
GetAsyncKeyState
DestroyIcon
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
LoadImageA
GetMenuBarInfo
GetMenuItemCount
GetSubMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
OpenIcon
CloseWindow
PostThreadMessageA
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ToAsciiEx
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
GetClientRect
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
MessageBoxA
LoadCursorA
GetPropA
EnumWindows
SendMessageA
GetWindow
GetCapture
WinHelpA
TrackPopupMenuEx
SetWindowPlacement
GetClassLongA
GetClassNameA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OffsetRect
GetKeyboardLayout
GetKeyboardState
PtInRect
UpdateLayeredWindow
CopyIcon
SetCursorPos
IsRectEmpty
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
GetIconInfo
WaitMessage
DestroyCursor
UnregisterClassA
IntersectRect
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
MsgWaitForMultipleObjects
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
EnumChildWindows
InSendMessage
ShowScrollBar
RegisterDeviceNotificationA
SetPropA
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
SystemParametersInfoA
IsWindow
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetMenuDefaultItem
RegisterWindowMessageA
IsWindowEnabled
GetDlgItem
GetWindowLongA
DestroyWindow
CreateDialogIndirectParamA
EnableWindow
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
PostQuitMessage
MapDialogRect
PostMessageA
TabbedTextOutA
GetFocus
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
DispatchMessageA
TranslateMessage
GetMessageA
ValidateRect
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
SetCursor
GetWindowThreadProcessId
GetLastActivePopup
GetParent
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
IsClipboardFormatAvailable
gdi32
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
CreateFontIndirectA
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
PatBlt
CreateDIBSection
StretchBlt
CreateCompatibleBitmap
GetDIBits
RealizePalette
SetPixel
GetPixel
SetDIBColorTable
UnrealizeObject
CreatePenIndirect
CreateBrushIndirect
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateDCA
CreateICA
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
CreateBitmap
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
GetDCOrgEx
GetClipBox
SetTextColor
WidenPath
GdiComment
PlayEnhMetaFile
CopyMetaFileA
StretchDIBits
EnumFontFamiliesA
GetTextCharsetInfo
CreateDIBitmap
EnumFontFamiliesExA
GetSystemPaletteEntries
DeleteMetaFile
GetTextExtentPointA
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
UpdateColors
MoveToEx
msimg32
AlphaBlend
TransparentBlt
GradientFill
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
advapi32
RevertToSelf
SetThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegSetValueA
RegEnumKeyExA
RegCreateKeyA
SetFileSecurityA
GetFileSecurityA
OpenThreadToken
shell32
SHGetFileInfoA
Shell_NotifyIconA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
ShellExecuteExA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DrawEx
shlwapi
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
oledlg
ord3
ord7
ord6
ord5
ord9
ord4
ord8
ole32
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleSetMenuDescriptor
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoGetMalloc
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
RevokeDragDrop
OleCreateFromFile
RegisterDragDrop
OleRun
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
CLSIDFromString
WriteClassStm
DoDragDrop
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoDisconnectObject
CoUninitialize
CoInitializeEx
CoCreateInstance
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
OleCreateLinkToFile
OleCreate
OleLoad
GetClassFile
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleRegEnumVerbs
OleIsRunning
CreateItemMoniker
CreateGenericComposite
CoLockObjectExternal
OleSaveToStream
OleGetIconOfClass
GetHGlobalFromILockBytes
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CreateStreamOnHGlobal
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
StringFromGUID2
OleSave
oleaut32
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
VarUdateFromDate
VarDateFromUdate
DosDateTimeToVariantTime
SystemTimeToVariantTime
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString
SafeArrayGetElemsize
SafeArrayGetDim
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
gdiplus
GdipCreateBitmapFromStream
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusShutdown
GdipCreateBitmapFromStreamICM
winmm
PlaySoundA
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
Sections
.textbss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ