Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8bb6dd4f56f289eaf9a925d6f7235340.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8bb6dd4f56f289eaf9a925d6f7235340.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.8bb6dd4f56f289eaf9a925d6f7235340.exe
-
Size
411KB
-
MD5
8bb6dd4f56f289eaf9a925d6f7235340
-
SHA1
1eaeef1681a3fa5bfa5cbe24645279cab079ba86
-
SHA256
48da85af2214258f581940838bb06f03d4ea8227f0595c9197638800ad584c84
-
SHA512
a89cfe197b67c619bb9c8a0fc99e1140c7e1cc60360e29d526c744a60e5a8a34c111823bd72939342a89c586647b9e0a5c6198fdf214d0ff1de5dcb715c198c8
-
SSDEEP
6144:MjW3yb7JvqlUeTLXjfBJ7NxYa4qeZUqlHpmcvXSbGqgSbGqnSbGq:Mai3Jva1zfNxtBeZUqlXvXS6SVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8bb6dd4f56f289eaf9a925d6f7235340.exe
Files
-
NEAS.8bb6dd4f56f289eaf9a925d6f7235340.exe.exe windows:5 windows x86
66476c3762d0ef81762f6b6a7b9d8878
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
CloseHandle
CompareStringW
CreateFileMappingW
CreateFileW
FoldStringW
GetCurrentProcess
GetCurrentThreadId
GetDateFormatW
GetFileInformationByHandle
GetLocalTime
GetLocaleInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoA
GetUserDefaultLCID
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
TerminateProcess
lstrcmpiW
lstrcpyW
lstrlenW
GetTimeFormatW
CreateFileA
user32
LoadCursorW
LoadCursorA
LoadIconA
advapi32
RegOpenKeyW
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ