Static task
static1
Behavioral task
behavioral1
Sample
NEAS.86a892ed231e0a0c6123e745a2bd7fb0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.86a892ed231e0a0c6123e745a2bd7fb0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.86a892ed231e0a0c6123e745a2bd7fb0.exe
-
Size
84KB
-
MD5
86a892ed231e0a0c6123e745a2bd7fb0
-
SHA1
8a78fd224e0c6c54996d5efdfae51bf10e880853
-
SHA256
db28d4d46aed2d1eff98d18d009dfe23918e3e9d53388fef475ca6448272c69f
-
SHA512
d62e203b4bfc20ad2dd932f57bcc11ca7543963b56b48cbc168c6be10d7297567ca5ca04ffbc3c1b773ca50e79fc60ef63f3af38a675cd4cf08683eb54c2d77b
-
SSDEEP
1536:QxNPUdbdopsTYxrYSnfg7ENe0Ytbq00cGWAso+M:QvPKbdopz3oINQOXMAso+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.86a892ed231e0a0c6123e745a2bd7fb0.exe
Files
-
NEAS.86a892ed231e0a0c6123e745a2bd7fb0.exe.exe windows:4 windows x86
a6eb34c3a4f55f14c36e3e269ffcf569
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
WriteFile
GetFileSize
DeleteFileA
CreateFileA
ReadFile
GetVersion
ExitProcess
GetCommandLineA
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CloseHandle
FlushFileBuffers
SetStdHandle
LCMapStringW
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
GetCurrentProcess
HeapAlloc
HeapFree
GetProcAddress
TerminateProcess
UnhandledExceptionFilter
user32
LoadAcceleratorsA
ShowCursor
SetCursor
LoadCursorA
MessageBoxA
DispatchMessageA
TranslateMessage
SendMessageA
SetWindowTextA
GetDlgItem
EndDialog
PostQuitMessage
GetMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
DialogBoxParamA
InvalidateRect
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassExA
LoadStringA
TranslateAcceleratorA
GetMessageA
gdi32
StretchDIBits
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ