Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9daf785039b2fc75f2d73042ed6e6ae0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9daf785039b2fc75f2d73042ed6e6ae0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9daf785039b2fc75f2d73042ed6e6ae0.exe
-
Size
279KB
-
MD5
9daf785039b2fc75f2d73042ed6e6ae0
-
SHA1
a00dc76e4ad95fcbed68e4d712334e55afee1710
-
SHA256
7c57cf96aef8e96c9d0fd72bf3b2cc10660819ee433d32650ec28e3740583a7e
-
SHA512
1314b0200f7239a138b810197d0a2723597f2d087706573a84ae38629a72f721e43b69fd103b13b14f6e291b9764e54e61d3eda72745cbf145187014147fd043
-
SSDEEP
3072:7CHMPbSbQKGL2j54PNmnxEed5bvjCgNMPpGYwD3WdviIlVGdk+Uhz9u:7rWbQKGL2jePsnxLbve28pGGpVl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9daf785039b2fc75f2d73042ed6e6ae0.exe
Files
-
NEAS.9daf785039b2fc75f2d73042ed6e6ae0.exe.exe windows:5 windows x86
6ddbb8b4678c2b82d1fde1f9dafd1597
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GlobalFlags
InterlockedExchange
GetLocaleInfoA
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEndOfFile
HeapFree
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
ExitProcess
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LCMapStringA
LCMapStringW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleW
CompareStringA
SetErrorMode
GetModuleFileNameA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
CreateThread
CloseHandle
GetLastError
GetCurrentProcess
GetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
CreateFileW
ExpandEnvironmentStringsA
GetVersionExA
GetComputerNameExA
GetVersion
lstrcmpA
lstrlenA
lstrcmpiA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetCommandLineA
GetModuleHandleA
GetConsoleTitleA
CreateProcessA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
IsDebuggerPresent
WaitForSingleObject
user32
GetFocus
IsWindow
GetForegroundWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ShowWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
FindWindowA
PostQuitMessage
DestroyMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowTextA
ValidateRect
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
PeekMessageA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
FindExecutableA
shlwapi
PathFindFileNameA
PathFindExtensionA
gdi32
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
GetStockObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantClear
VariantInit
VariantChangeType
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ