Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a6e32a1325d8535b4b5e3a240450d5c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a6e32a1325d8535b4b5e3a240450d5c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a6e32a1325d8535b4b5e3a240450d5c0.exe
-
Size
69KB
-
MD5
a6e32a1325d8535b4b5e3a240450d5c0
-
SHA1
09c6f31ba1ef4b8b2e51f88093601d0f666dcde2
-
SHA256
c9f87012f8f27ddd2edc7d360c1a0c781f334237853ae6eed2f10004501b67aa
-
SHA512
6da598cba96d852c417375cad27855467bf93ec12b831efc817390e72d3423a3b01bf360b4f557c84454d92986eab75060700d9c7a4120d63e6dc60c37d6621d
-
SSDEEP
1536:OOQc4PUxKFOVNimbbrwbbbGbb6bbbbl1Qhcdh:OzDPuKFO7kh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a6e32a1325d8535b4b5e3a240450d5c0.exe
Files
-
NEAS.a6e32a1325d8535b4b5e3a240450d5c0.exe.exe windows:4 windows x86
bb45ada9beeca472fa0ebf7f18094132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
atl
AtlAxGetHost
AtlAxWinInit
gdi32
AddFontMemResourceEx
AddFontResourceA
AddFontResourceExA
AddFontResourceExW
AddFontResourceTracking
AddFontResourceW
netapi32
DsGetDcCloseW
DsGetDcNameA
DsGetDcNameW
DsGetDcNameWithAccountA
DsGetDcNameWithAccountW
DsGetDcNextA
DsGetDcNextW
DsGetDcSiteCoverageA
DsGetDcSiteCoverageW
oledlg
OleUIChangeSourceA
kernel32
_lopen
ExitProcess
ReadFile
GetTickCount
GetACP
ReadConsoleA
GetSystemDirectoryA
Module32First
GetCommandLineA
olepro32
OleCreateFontIndirect
OleCreateFontIndirect
OleCreateFontIndirect
icmp
IcmpSendEcho
quartz
AMGetErrorTextA
rasapi32
RasClearConnectionStatistics
RasClearLinkStatistics
RasClearConnectionStatistics
RasClearLinkStatistics
RasClearConnectionStatistics
RasClearLinkStatistics
esent
JetGetBookmark
JetGetColumnInfo
JetGetCounter
JetGetCurrentIndex
JetGetCursorInfo
JetGetDatabaseFileInfo
JetGetDatabaseInfo
JetGetIndexInfo
JetGetInstanceInfo
JetGetBookmark
JetGetColumnInfo
JetGetCounter
JetGetCurrentIndex
JetGetCursorInfo
JetGetDatabaseFileInfo
JetGetDatabaseInfo
JetGetIndexInfo
JetGetInstanceInfo
raschap
RasEapCreateConnectionProperties
RasEapCreateConnectionProperties
RasEapCreateUserProperties
Sections
.text9 Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rs Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE