Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3cdeb3f3b9202fb09fda675fae91b0d0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3cdeb3f3b9202fb09fda675fae91b0d0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3cdeb3f3b9202fb09fda675fae91b0d0.exe
-
Size
174KB
-
MD5
3cdeb3f3b9202fb09fda675fae91b0d0
-
SHA1
69b4a97cf71bad0604e6ecb1163b0c419a99c60b
-
SHA256
c6a1cf8740725408034b1cf52092196f42ebf137504ee2908870efa4c28d6973
-
SHA512
cd7cf1352f86b8c265c73b902f1f7e22cfdf5c478a1b643b763d9f7e53ba9f681d7c8e761606ee01785e9ff7d78b094eed14021bca28c66e14bffceb14d69ae9
-
SSDEEP
3072:20UFbvUK9LWpeB+KRRdCBk2xnZLC9muUPi8yZEHqRg8Hz3EcbMcK:2pbv5c7ZL2HUPiUHwxT0cba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3cdeb3f3b9202fb09fda675fae91b0d0.exe
Files
-
NEAS.3cdeb3f3b9202fb09fda675fae91b0d0.exe.exe windows:4 windows x86
8fb9a7613c21c89e547fbb5234d69d37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
mingwm10
__mingwthr_key_dtor
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
fputs
free
fwrite
malloc
realloc
signal
sprintf
strcmp
strcpy
libgcc_s_dw2-1
_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
qtcore4
_Z17qt_message_output9QtMsgTypePKc
_Z5qFreePv
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray7reallocEi
_ZN10QByteArrayC1EPKc
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN10QTextCodec17setCodecForLocaleEPS_
_ZN10QTextCodec4cftrE
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication4quitEv
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN5QDate11currentDateEv
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN8QLibrary4loadEv
_ZN8QLibrary7resolveEPKc
_ZN8QLibraryC1ERK7QStringP7QObject
_ZN8QLibraryD1Ev
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData7detach3Ev
_ZNK11QMetaObject2trEPKcS1_
_ZNK5QDate7addDaysEi
_ZNK5QDate8toStringERK7QString
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString5toIntEPbi
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
qtgui4
_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout9addLayoutEP7QLayoutiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QMessageBox11informationEP7QWidgetRK7QStringS4_S4_S4_S4_ii
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN15QAbstractButton7setTextERK7QString
_ZN5QFont12setPointSizeEi
_ZN5QFont9setWeightEi
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMaximumSizeEii
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5closeEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox5clearEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QGroupBox12setCheckableEb
_ZN9QGroupBox7setFlatEb
_ZN9QGroupBox8setTitleERK7QString
_ZN9QGroupBoxC1EP7QWidget
_ZN9QLineEdit11setEchoModeENS_8EchoModeE
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK9QComboBox11currentTextEv
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 104B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE