Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3a786eb0e709761ef21099c602042a90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3a786eb0e709761ef21099c602042a90.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3a786eb0e709761ef21099c602042a90.exe
-
Size
2.7MB
-
MD5
3a786eb0e709761ef21099c602042a90
-
SHA1
cc2aebdad492ac58ed5a298344d3e63bc292c97c
-
SHA256
b7c0831d20d238c351e040e480994fd3f36b1b34288ad5df1f250eba5502bd89
-
SHA512
0cd08cd050ebf79fda48fe792edf548179b9fa0c5832b3cb67895d69ec07746b4d3b09643adb63663b034d9cedf7aa52f5829dffc39ceb7bb47e9f6e16153690
-
SSDEEP
49152:mR9gEVIe7OY6qWlZWGA8mBt4m15z9pomZfKW45uJXjFGbUZIA4+fino3ozj:0gEV3MzA8mBt469pomr45uJXxq5ABfih
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3a786eb0e709761ef21099c602042a90.exe
Files
-
NEAS.3a786eb0e709761ef21099c602042a90.exe.exe windows:5 windows x86
25eab81b830cb759acb39d75a79d15a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32 rasapi32
BitBlt -C:
rasapi32
RasHangUpA
kernel32
SetEndOfFile
user32
OpenClipboard
gdi32
SelectPalette
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
VariantClear
comctl32
ord17
ws2_32
inet_ntoa
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
__dllonexit
psapi
GetMappedFileNameW
Sections
.text Size: 1.3MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ