Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ec7c6aee441b328795f55cb66a98a9e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.ec7c6aee441b328795f55cb66a98a9e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.ec7c6aee441b328795f55cb66a98a9e0.exe
-
Size
207KB
-
MD5
ec7c6aee441b328795f55cb66a98a9e0
-
SHA1
3aecf29bb0d533ae5a38d2f9e535ea26db035db6
-
SHA256
33b6bd7f62f4260828cfb9fcbe7bef1c87bfd06ce52a1f96bffec3c31440e87c
-
SHA512
31cdda7aded1663fe4cbb6b62fa1a516208c59cb12b62205aace1db1c909a156434b1eb5e6d962b858e6536f15abf814dead0a9ca08b0eef3a910f83830f9188
-
SSDEEP
6144:EBTULiVKToYhKjAM9siE6D618V/YekdiybPZ:EVUWVGKda5oyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ec7c6aee441b328795f55cb66a98a9e0.exe
Files
-
NEAS.ec7c6aee441b328795f55cb66a98a9e0.exe.exe windows:4 windows x86
8940b81b7b3c252e5b7510b630f0bd9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
GetWindowsDirectoryA
GetVersion
AddAtomA
CompareStringW
GetTempFileNameA
GetModuleHandleA
GetProcAddress
user32
DefFrameProcA
EndMenu
LoadMenuA
CreateWindowExA
IsMenu
CallWindowProcW
GetMenu
GetMenuItemInfoW
WaitForInputIdle
DestroyWindow
FrameRect
FindWindowA
keybd_event
GetCapture
CascadeWindows
WinHelpW
RegisterClassExW
CharLowerW
GetSystemMetrics
SetWindowTextA
AppendMenuA
EmptyClipboard
CreateDialogParamW
DefFrameProcW
GetMenuState
LoadMenuA
DestroyMenu
GetCapture
GetActiveWindow
GetMessageW
CreateMenu
GetDC
EnumClipboardFormats
LoadCursorA
SetDlgItemTextA
SetDlgItemInt
CallWindowProcA
GetWindowLongW
ShowCaret
GetMenuItemID
GetWindowTextLengthW
CheckDlgButton
wvsprintfA
GetSysColor
DialogBoxIndirectParamA
CharLowerA
DefDlgProcA
gdi32
SetWorldTransform
DeleteMetaFile
GetGlyphOutlineW
EnumFontFamiliesExA
GetDIBits
CopyEnhMetaFileA
GetColorSpace
SetSystemPaletteUse
GetArcDirection
FillPath
GetROP2
EnumICMProfilesA
CreateRoundRectRgn
SetViewportOrgEx
CreateFontIndirectExA
RectInRegion
GetTextExtentExPointW
EndFormPage
SetTextJustification
RemoveFontResourceW
advapi32
RegOpenKeyW
RegDeleteKeyW
RegRestoreKeyW
RegEnumValueW
RegOpenKeyExW
RegReplaceKeyW
ole32
CoGetObject
CLSIDFromString
CoGetCallerTID
wininet
IncrementUrlCacheHeaderData
HttpCheckDavCompliance
SetUrlCacheConfigInfoW
InternetSetFilePointer
GopherGetLocatorTypeW
InternetQueryOptionW
InternetSecurityProtocolToStringW
FtpFindFirstFileW
GopherGetAttributeW
CreateUrlCacheContainerA
InternetCanonicalizeUrlW
winmm
mixerGetNumDevs
waveOutOpen
waveInGetPosition
midiStreamRestart
winspool.drv
AddPortExA
EnumFormsW
oledlg
OleUIPasteSpecialW
OleUIPromptUserW
OleUIInsertObjectW
OleUIAddVerbMenuA
Sections
.f Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dHtj Size: 2KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xtoU Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uROSoW Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NenQvv Size: 5KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ