Static task
static1
Behavioral task
behavioral1
Sample
NEAS.251d1b75203ea34e2f63e980d99aeb40.exe
Resource
win7-20231020-en
General
-
Target
NEAS.251d1b75203ea34e2f63e980d99aeb40.exe
-
Size
165KB
-
MD5
251d1b75203ea34e2f63e980d99aeb40
-
SHA1
3fea065779dbe1289b936a338efa3fe55d01494b
-
SHA256
47b3496333c595e4bfa5a1240f403b58178069e8465a6a4f79e0f015cf330578
-
SHA512
4bd9786b179c9ae1c606e7866fc9474759b4669de52511fb3f830ce7da7ae93a134cc2e77c03674f32a8cb94ae9bc54b1c35365eec4f6c351b9e99cec3ee016f
-
SSDEEP
3072:/jCKMPKZ293YOb9tfVCRd2hl6EtNfMezu06C6QgSH06WLl+EzjB:/jC7PKwpYObj8H2OEfVtdZHkl/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.251d1b75203ea34e2f63e980d99aeb40.exe
Files
-
NEAS.251d1b75203ea34e2f63e980d99aeb40.exe.exe windows:4 windows x86
179c101ea44e1158932df844a0ba0c4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCommandLineW
GetCurrentProcessId
SetUnhandledExceptionFilter
GetLocalTime
WaitForSingleObject
CreateToolhelp32Snapshot
Thread32First
OpenThread
SuspendThread
ResumeThread
Thread32Next
VirtualQuery
IsBadWritePtr
CreateMutexW
Sleep
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateProcessW
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
FlushFileBuffers
advapi32
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
shlwapi
SHGetValueW
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE