Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c86da4bca54431dac6f0ccb230fcbcc0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c86da4bca54431dac6f0ccb230fcbcc0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c86da4bca54431dac6f0ccb230fcbcc0.exe
-
Size
24KB
-
MD5
c86da4bca54431dac6f0ccb230fcbcc0
-
SHA1
679aaf86496cd5da4e7990285a09d43d4ce2e386
-
SHA256
ae12a99ad7e8858aae38e2178fac90c4625bb5f974c1901a8b35c9e0e38c9c4c
-
SHA512
878e006b2e8ed657d32d98ebbf4f08b3074ea554971c0a40156c96224d49c194806fa1d0eb680e6c69424c438c66ee512fc7dfbea06d82879118cf3dd5b437e9
-
SSDEEP
384:kkju1dbvG8Qqrxiw39A9TMiLiuV9ELY6Bvc/rB:hIC+bC9EL9vU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c86da4bca54431dac6f0ccb230fcbcc0.exe
Files
-
NEAS.c86da4bca54431dac6f0ccb230fcbcc0.exe.exe windows:4 windows x86
3a9c09fa738a6f8013500f35f9420e3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu
kernel32
CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA
gdi32
CreateFontIndirectA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ