Static task
static1
Behavioral task
behavioral1
Sample
NEAS.65912126e2d35a9a760ec1b34d70fb10.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.65912126e2d35a9a760ec1b34d70fb10.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.65912126e2d35a9a760ec1b34d70fb10.exe
-
Size
6.1MB
-
MD5
65912126e2d35a9a760ec1b34d70fb10
-
SHA1
a9846c5e530680b50e52a334e73cad7243b6d25c
-
SHA256
b5b5d3abc813ba58159456131b8444297301990d5193cf4928631f2ed7fe76f3
-
SHA512
0f7a8e3cbbcbf9b3250fef8c5608a63d286c0458442b1176ee025ba4fbcbd6cd59e85e52b4e58f50a23047a1cb1370724f9ef1b2381dc6a232a73ccc96991e37
-
SSDEEP
196608:1FMFW5kuvc8/O8okWmbRJ5lSZRz1wCs/NPdtQzt/:EsNc8/ZoJmbP5liRz1wCs/Nlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.65912126e2d35a9a760ec1b34d70fb10.exe
Files
-
NEAS.65912126e2d35a9a760ec1b34d70fb10.exe.dll windows:6 windows x86
8f5b97961aca1d1a19b79a03244fb575
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
GetDiskFreeSpaceW
QueryDosDeviceW
GetSystemInfo
LocalFree
FileTimeToSystemTime
CompareStringW
GetThreadLocale
IsValidCodePage
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
ReadFile
GetConsoleMode
FlushFileBuffers
GetModuleFileNameW
WriteFile
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
HeapSize
GetModuleHandleExW
ExitProcess
GetProcessHeap
IsDebuggerPresent
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetProcAddress
GetModuleHandleW
RaiseException
SetThreadPriority
GetTimeZoneInformation
GetLocaleInfoW
GetProcessTimes
VirtualQueryEx
GetCurrentThread
SetCommBreak
GetCommState
SetEndOfFile
GetTempFileNameW
CloseHandle
RtlCaptureContext
FindNextFileA
GetOEMCP
FindClose
GetOverlappedResult
MulDiv
GetExitCodeProcess
HeapDestroy
GetConsoleCP
GetWindowsDirectoryA
VirtualFree
CompareFileTime
GetACP
GetStartupInfoW
TlsFree
TlsSetValue
WideCharToMultiByte
EncodePointer
DecodePointer
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
user32
CharLowerBuffW
SendDlgItemMessageA
DrawTextExW
CreateIconIndirect
PeekMessageA
SetWindowTextA
MapWindowPoints
GetMessageA
GetSystemMenu
SetCapture
GetSubMenu
ModifyMenuW
CharUpperW
DefWindowProcA
DestroyCaret
EndMenu
RemoveMenu
GetKeyboardType
CheckRadioButton
ReleaseCapture
RegisterClassW
GetDlgItemTextA
DrawFrameControl
GetMonitorInfoW
CopyRect
TrackPopupMenu
IsIconic
GetKeyState
CreateMenu
DrawEdge
OffsetRect
MessageBoxA
DrawStateW
SetMenu
CheckMenuItem
IsRectEmpty
CheckDlgButton
gdi32
PatBlt
CopyEnhMetaFileA
CreatePenIndirect
ExtCreatePen
SetLayout
GetTextExtentPoint32A
RectInRegion
SetMapMode
Ellipse
ExtCreateRegion
RealizePalette
CreateBitmapIndirect
GetCharABCWidthsW
CreatePatternBrush
GetBitmapBits
CreateRectRgnIndirect
GetTextExtentPointA
GetStockObject
SelectClipRgn
advapi32
AllocateAndInitializeSid
RegCloseKey
GetLengthSid
RegConnectRegistryW
shell32
ShellExecuteW
oleaut32
VariantInit
Sections
.text Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ