Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c46120fb16afaf9305198fec2cae6a40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c46120fb16afaf9305198fec2cae6a40.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c46120fb16afaf9305198fec2cae6a40.exe
-
Size
163KB
-
MD5
c46120fb16afaf9305198fec2cae6a40
-
SHA1
ffdd420aa86e8361fb4c67d307956e0ccd979e68
-
SHA256
f40de8dae68db35041a926ecfcfca8af9f4f9b9efef4474fb146ba782c324fc8
-
SHA512
7d9eec9b123bd020ca40770f70abf4a31c6194eb1d46f6480b569747a7152e8a4d614d0c36fc7a930e9abff12dfb43ebcb9af7c59cd797fefab74b8e276f40f8
-
SSDEEP
3072:JjnaOOgztVt+Mw3WibWH8RLZDEn5/n6l2ccz/dJEfa:Rna0Zw3WyWH8RLZDE5vhcc7d8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c46120fb16afaf9305198fec2cae6a40.exe
Files
-
NEAS.c46120fb16afaf9305198fec2cae6a40.exe.exe windows:1 windows x86
2f8d878a47a535c404fa597730bcdfcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertCloseStore
CryptBinaryToStringW
CertFreeCertificateContext
user32
DefWindowProcW
EnableMenuItem
GetClientRect
GetCursorPos
GetDesktopWindow
GetMenu
GetSystemMetrics
GetWindow
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetTimer
SetWindowTextW
SystemParametersInfoW
UpdateWindow
kernel32
CloseHandle
DeleteFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
GetVersionExW
LoadLibraryA
LoadLibraryW
VirtualProtect
lstrlenW
GetStartupInfoW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
gdi32
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
SetRectRgn
CreateRectRgn
Sections
AUTO Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ