Static task
static1
Behavioral task
behavioral1
Sample
NEAS.83ee5b1732f7045a202293d7669e6de0.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.83ee5b1732f7045a202293d7669e6de0.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.83ee5b1732f7045a202293d7669e6de0.exe
-
Size
1.9MB
-
MD5
83ee5b1732f7045a202293d7669e6de0
-
SHA1
8870de7a52e0b9f007b24666cad276a6aa1a98fa
-
SHA256
9913ec2325b8b6d19dbbefd801a6f0d0ab47fd7140a97e9c3c61770bd813e99c
-
SHA512
6832e931ad2312dcd3989ac09243ea56a3e5696ec607d33ead6df1d42d7525673773168d91966b12d2e294c5d3f4613b73a67137cda60437ad0c61acd8f057f1
-
SSDEEP
49152:kUhU726oI1fIDO+LGqIX5Y5nQn4nK6ufb:kKebJlV55n4nW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.83ee5b1732f7045a202293d7669e6de0.exe
Files
-
NEAS.83ee5b1732f7045a202293d7669e6de0.exe.dll windows:5 windows x86
6001d577e5e3123e82ad07c3e0f31a21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
oleaut32
CreateErrorInfo
LoadTypeLibEx
GetErrorInfo
user32
SetCaretBlinkTime
GetMenuItemCount
SetMenuItemInfoW
GetCursor
ActivateKeyboardLayout
GetDlgCtrlID
CheckDlgButton
OpenIcon
winspool.drv
DeletePrinterDriverExW
urlmon
CoInternetCreateZoneManager
advapi32
AreAnyAccessesGranted
CreatePrivateObjectSecurityEx
CryptDuplicateKey
RevertToSelf
shlwapi
PathCombineW
SHRegEnumUSKeyW
msvcrt
memset
isdigit
ldiv
gdi32
DeleteMetaFile
kernel32
SetConsoleActiveScreenBuffer
Thread32First
HeapLock
Thread32Next
GetEnvironmentStringsW
SetUserGeoID
FindNextFileW
WaitForSingleObject
GetBinaryTypeA
GetModuleHandleW
CancelIo
WTSGetActiveConsoleSessionId
FlushConsoleInputBuffer
DeleteTimerQueueTimer
GetModuleFileNameA
GetProcAddress
LoadLibraryA
LoadLibraryExA
VirtualAlloc
GetUserDefaultUILanguage
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 169KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ