Behavioral task
behavioral1
Sample
NEAS.77e1e7853c691c6d3ab313d8d3507630.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.77e1e7853c691c6d3ab313d8d3507630.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.77e1e7853c691c6d3ab313d8d3507630.exe
-
Size
600KB
-
MD5
77e1e7853c691c6d3ab313d8d3507630
-
SHA1
d8229310e590c891d556d48022c789e2d59c629f
-
SHA256
5e9266bca76b3afb50f41a48f3e0f02b31b98a66574ef1331a89d021446b5342
-
SHA512
1bf42dbb8417b529c59b0502badec6ca3e21152f410258ce272153cfe8bc5507114da36f7d89ff0db3f1d2b9e0daa9670d8f249617ef5587741838446674f58f
-
SSDEEP
1536:DkSsY9rHMt74QB76FNUAikl6/GoXuctrepPFSrYDZE8gJ6xDFDTPMIC3L:D1sY9pU8WGoRtrepPDZxJDTE3L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.77e1e7853c691c6d3ab313d8d3507630.exe
Files
-
NEAS.77e1e7853c691c6d3ab313d8d3507630.exe.exe windows:4 windows x86
b171ec15a77ebe3842c5750854e44487
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateProcessA
SetCurrentDirectoryA
CopyFileA
SetFileAttributesA
GetFileAttributesA
ReleaseMutex
CreateMutexA
OpenMutexA
GetModuleFileNameA
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
FindNextFileA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
LoadLibraryA
LocalFree
GetProcAddress
FreeLibrary
FindFirstFileA
FindClose
SetEndOfFile
CreateFileA
GetFileSize
SetFilePointer
VirtualFree
HeapCreate
ReadFile
WriteFile
CloseHandle
GetLastError
FormatMessageA
GetStringTypeA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
FlushFileBuffers
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
comdlg32
GetOpenFileNameA
gdi32
DeleteObject
SetTextColor
SetBkMode
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
CreateSolidBrush
DeleteDC
user32
MessageBoxA
SetForegroundWindow
ShowWindow
DialogBoxParamA
GetDlgItem
BeginPaint
EndPaint
InvalidateRect
UpdateWindow
EndDialog
GetDlgItemInt
FindWindowA
SendMessageA
RedrawWindow
IsDlgButtonChecked
LoadImageA
SendDlgItemMessageA
SetDlgItemTextA
GetWindowRect
GetSystemMetrics
MoveWindow
GetDlgItemTextA
wsprintfA
Sections
UPX0 Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE