Static task
static1
Behavioral task
behavioral1
Sample
NEAS.cb66429060eac3fe0994f085a52af080.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.cb66429060eac3fe0994f085a52af080.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.cb66429060eac3fe0994f085a52af080.exe
-
Size
456KB
-
MD5
cb66429060eac3fe0994f085a52af080
-
SHA1
465eec2f131a0439feb801c7f3cd1996274e5dc6
-
SHA256
9fd67e7db1b2c61336cce725f0b5fc664c862e5dbeb7dd145d591a120f9dba69
-
SHA512
0655f3ed505d9f453a49fd10d6e9e3c40d41aa4ebf640cea969b63f246685d02277d92b1c5c672c4322164e683413ed258475d4f5f45527cd08c8c3a7a2fac4a
-
SSDEEP
3072:6X6YNAwYa8TbCm+hRYGJO+lgk6r5zHUkzHHSzHHnzHH2zHHszHHnzHHBfTjpzHHv:WfN+SI+lZ6rgh+XJC4wW8cTcp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.cb66429060eac3fe0994f085a52af080.exe
Files
-
NEAS.cb66429060eac3fe0994f085a52af080.exe.exe windows:5 windows x64
53052cff4b272a4c5e040c04f9fa0beb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
comctl32
InitCommonControls
user32
GetMenu
GetMessageW
GetKeyboardState
GetKeyboardLayout
GetFocus
GetDlgItem
TranslateMessage
TrackPopupMenu
TrackMouseEvent
ToAsciiEx
ShowWindow
SetWindowLongPtrW
SetMenu
SetFocus
SetDlgItemTextW
SetClipboardData
PostQuitMessage
OpenClipboard
MoveWindow
MapVirtualKeyExW
LoadMenuW
LoadImageW
IsWindowEnabled
IsWindow
IsDlgButtonChecked
IsClipboardFormatAvailable
InvalidateRect
GetWindowTextW
GetWindowRect
GetWindowLongPtrW
GetSystemMetrics
GetSubMenu
GetDlgItemTextW
GetClipboardData
GetClassNameW
GetAsyncKeyState
EnumChildWindows
EnableWindow
EnableMenuItem
EmptyClipboard
DrawStateW
DrawFrameControl
DispatchMessageW
DestroyWindow
DestroyMenu
CreatePopupMenu
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckMenuItem
CheckDlgButton
CallWindowProcW
AppendMenuW
SendMessageW
SendDlgItemMessageW
PostMessageW
LoadStringW
GetParent
shell32
ShellAboutW
gdi32
GetTextExtentPoint32W
SetBkMode
SetTextColor
GetStockObject
msvcrt
memmove
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
_wcsicmp
wcslen
wcscpy
wcscat
_strupr
_strdup
strlen
memset
memcpy
swscanf
swprintf
wcschr
atan
malloc
free
_isnan
wcscmp
acos
asin
_finite
cos
cosh
exp
fabs
fmod
log
log10
pow
sin
sinh
sqrt
tan
tanh
ceil
modf
kernel32
DeleteCriticalSection
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetLastError
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
LoadLibraryW
GetProcAddress
FreeLibrary
GetLocaleInfoW
WriteProfileStringW
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
GetProfileIntW
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcessId
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 397KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ