Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d460e77f3a0f03dd08841f13788d7f70.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d460e77f3a0f03dd08841f13788d7f70.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d460e77f3a0f03dd08841f13788d7f70.exe
-
Size
3.0MB
-
MD5
d460e77f3a0f03dd08841f13788d7f70
-
SHA1
0c7859432d1b784e370fb3752b6c9e4f85698548
-
SHA256
80b2e5693af8affac5ff5f8955677116a5d750ba6fdb16c2e5f25a5cbcf09c40
-
SHA512
a5f0cde32fc6151028d9516a5353cfafd16130f8ff225261d8cc26788b9db9d536a6e3d8d612d2c8498bd22d3883e127fc982289aec5f093cf679c97abff4ac6
-
SSDEEP
49152:/bX//ydOdQlWivJ/qnhQgjxPJmGZ417HBl3tutImu:/b3AgivJ/ELL41btutId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d460e77f3a0f03dd08841f13788d7f70.exe
Files
-
NEAS.d460e77f3a0f03dd08841f13788d7f70.exe.exe windows:4 windows x86
4e45cb832b338051891af7b18aa5b112
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetProfileStringA
GetExitCodeThread
QueryPerformanceCounter
QueryPerformanceFrequency
SwitchToThread
TerminateThread
SetPriorityClass
GetOverlappedResult
WaitForSingleObject
CloseHandle
GetLastError
DeviceIoControl
CreateEventA
CreateFileA
DefineDosDeviceA
Sleep
QueryDosDeviceA
GetDiskFreeSpaceExA
GetLocalTime
GetCurrentProcess
FlushFileBuffers
GetWindowsDirectoryA
GetVolumeInformationA
WriteFile
ReadFile
GetVersionExA
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
MulDiv
GlobalFree
GlobalReAlloc
CreateMutexA
GetPrivateProfileStringA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
SetLastError
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageA
lstrcpynA
lstrcmpA
IsBadStringPtrW
IsBadStringPtrA
IsBadWritePtr
IsBadReadPtr
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetModuleFileNameA
GetCurrentThread
SetEvent
GetPrivateProfileIntA
WritePrivateProfileStringA
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
VirtualProtect
GetProfileIntA
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
ResetEvent
OutputDebugStringA
GetTempFileNameA
GetDiskFreeSpaceA
lstrlenW
GlobalSize
CopyFileA
lstrcpyW
RtlUnwind
HeapValidate
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
DebugBreak
GetStdHandle
GetTimeZoneInformation
GetSystemTime
GetACP
TerminateProcess
CreateThread
ExitThread
FatalAppExitA
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
user32
IsCharLowerA
MapVirtualKeyA
GetKeyNameTextA
MessageBeep
TranslateMessage
DispatchMessageA
InflateRect
GetSysColorBrush
FillRect
SetRect
LoadImageA
ExitWindowsEx
GetSysColor
DestroyIcon
GetWindowLongA
LoadCursorA
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
SetActiveWindow
PeekMessageA
MapWindowPoints
GetClientRect
SendDlgItemMessageA
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
GetWindowThreadProcessId
WaitMessage
IsClipboardFormatAvailable
InSendMessage
RegisterClipboardFormatA
CopyAcceleratorTableA
CharNextA
GetDialogBaseUnits
LoadStringA
DestroyCursor
SetCursorPos
GetAsyncKeyState
GetClipboardFormatNameA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
wvsprintfA
GetMessageA
GetCursorPos
EndDialog
CreateDialogIndirectParamA
CharUpperA
PostQuitMessage
OemToCharA
CharToOemA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextA
DrawFocusRect
DrawFrameControl
MapVirtualKeyExA
DrawStateA
DrawIcon
InvertRect
FrameRect
ExcludeUpdateRgn
WindowFromDC
SubtractRect
UnionRect
SetRectEmpty
PtInRect
IsRectEmpty
TabbedTextOutA
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
OpenIcon
CloseWindow
PostThreadMessageA
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
UnregisterClassA
DefDlgProcA
IsWindowUnicode
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
EnableWindow
GetKeyboardLayout
MessageBoxA
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
GetScrollRange
GetDlgCtrlID
GetFocus
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
GetMenuItemInfoA
DlgDirListA
GetDesktopWindow
SetCapture
GetActiveWindow
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
PostMessageA
ReleaseCapture
SetCursor
GetWindowRect
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
IsWindow
GetClassNameA
DefWindowProcA
SendMessageA
DestroyWindow
GetKeyState
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
GetWindow
GetParent
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
DrawEdge
IsDlgButtonChecked
gdi32
SetTextColor
DeleteMetaFile
CopyMetaFileA
StretchDIBits
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetGlyphOutlineA
GetKerningPairsA
GetFontData
GetCharABCWidthsA
GetOutlineTextMetricsA
ResetDCA
GetBoundsRect
SetBoundsRect
Escape
GetAspectRatioFilterEx
GetCharWidthA
GetTextCharacterExtra
GetTextMetricsA
GetTextFaceA
GetTextAlign
GetTextExtentPoint32A
TextOutA
ExtFloodFill
FloodFill
SetPixel
GetPixel
PatBlt
RoundRect
Rectangle
PolyPolygon
Polygon
Pie
Ellipse
Chord
Polyline
Arc
RectVisible
PtVisible
PaintRgn
InvertRgn
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
CreateICA
CreateDCA
RectInRegion
GetRgnBox
OffsetRgn
EqualRgn
SetRectRgn
PathToRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateRectRgnIndirect
ResizePalette
GetNearestPaletteIndex
AnimatePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreateDiscardableBitmap
GetBitmapDimensionEx
SetBitmapDimensionEx
GetBitmapBits
SetBitmapBits
CreateBitmapIndirect
CreateFontA
CreateFontIndirectA
CreateBrushIndirect
CreatePenIndirect
UnrealizeObject
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
GetClipBox
GetDCOrgEx
CreateCompatibleBitmap
CreateBitmap
StretchBlt
SetBkColor
GetTextExtentPointA
PtInRegion
SelectClipRgn
CreateDIBitmap
GetRegionData
CreateRectRgn
CreatePalette
CreateSolidBrush
GetDIBits
SetDIBitsToDevice
CreateCompatibleDC
GetObjectA
CreateDIBSection
SelectObject
BitBlt
ExtCreateRegion
CombineRgn
DeleteObject
DeleteDC
comdlg32
PrintDlgA
PageSetupDlgA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
InitiateSystemShutdownA
LookupPrivilegeValueA
OpenProcessToken
RegFlushKey
GetUserNameW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
AdjustTokenPrivileges
shell32
ExtractIconA
SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteA
comctl32
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_AddMasked
ImageList_Add
ImageList_GetImageCount
ImageList_Draw
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord13
ord17
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DragLeave
ord8
ImageList_SetImageCount
ImageList_Copy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord14
oledlg
ord3
ord7
ord6
ord5
ord9
ord4
ord8
ole32
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoLockObjectExternal
OleUninitialize
OleSetClipboard
CoDisconnectObject
OleRun
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
GetRunningObjectTable
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
OleFlushClipboard
CreateItemMoniker
CreateGenericComposite
CreateFileMoniker
GetClassFile
OleInitialize
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegGetMiscStatus
OleRegEnumVerbs
DoDragDrop
OleSetMenuDescriptor
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleIsRunning
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSetContainedObject
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoFreeUnusedLibraries
CoGetMalloc
olepro32
ord253
ord251
oleaut32
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayCreate
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
DosDateTimeToVariantTime
SysStringLen
LoadTypeLi
SysFreeString
OleLoadPicturePath
VarCyFromStr
iphlpapi
GetNetworkParams
FlushIpNetTable
CreateIpNetEntry
GetAdaptersInfo
SendARP
GetIpAddrTable
ws2_32
WSACreateEvent
htons
closesocket
inet_addr
WSACleanup
WSAStartup
WSARecv
WSAGetLastError
sendto
WSASendTo
WSACloseEvent
htonl
WSASetEvent
WSASend
WSAResetEvent
WSASocketA
setsockopt
ioctlsocket
bind
connect
WSAIoctl
msimg32
TransparentBlt
AlphaBlend
netapi32
NetApiBufferFree
NetUserGetInfo
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ