Static task
static1
Behavioral task
behavioral1
Sample
NEAS.10cc6929fdf32e3ad36ddf97ef770970.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.10cc6929fdf32e3ad36ddf97ef770970.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.10cc6929fdf32e3ad36ddf97ef770970.exe
-
Size
5.6MB
-
MD5
10cc6929fdf32e3ad36ddf97ef770970
-
SHA1
d19249b97000c8770e85134115a05b686b3d3940
-
SHA256
af3fd2481a0e094fcf17e717606ce165ce520a2d01dd11530677412b30123896
-
SHA512
aefd30e8624439c0100f6eeec8e6030536341c844344e750dd5892a275d3b2a77d29d682a0f758fc88a2bc05d2a5f832eeab32c4cc8ff6e4c87c7196f93f1d35
-
SSDEEP
98304:+wEp1BfVzp9jbCURsimpQy7UOEMUIcH6I+gURBE1u:Sp1BZWUGimpQy7UXMU3N+zRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.10cc6929fdf32e3ad36ddf97ef770970.exe
Files
-
NEAS.10cc6929fdf32e3ad36ddf97ef770970.exe.exe windows:5 windows x86
9edde1e0afac831a205c4f3e165bd7c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32 winmm
GetFileTitleA �V
winmm
midiStreamOut
ws2_32
htons
kernel32
WideCharToMultiByte
user32
SetMenu
gdi32
RectVisible
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CreateILockBytesOnHGlobal
oleaut32
VariantCopy
comctl32
ImageList_GetImageInfo
oledlg
ord8
comdlg32
GetSaveFileNameA
msvcrt
__dllonexit
psapi
GetMappedFileNameW
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bintsof Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bintsof Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ