Static task
static1
Behavioral task
behavioral1
Sample
NEAS.695a3ded48fd23187f83adee755f3c90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.695a3ded48fd23187f83adee755f3c90.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.695a3ded48fd23187f83adee755f3c90.exe
-
Size
205KB
-
MD5
695a3ded48fd23187f83adee755f3c90
-
SHA1
7a66217753a9008d5ffec4da415ac62bf40d0e80
-
SHA256
2e91957f9d01fb8fc8d8c95666f616fcd5dea4da430f9bb0783aa5135389b7d5
-
SHA512
5ac212458cc864593e7957f18eaaa1a988d2a6ccc17b328bfcdfd377c9271a0789e3ab075d24a71288f6a8404e6c486719dfc7347cfe12ca568871eb802eb9e8
-
SSDEEP
3072:S7VD4DUHnNZkfOP6sfIOpJ9C3hPlGxt1UhRkgyankTIzfwAYzWcXCyqT36zhRRKy:IzHnMLm5GNGxHUhtnkdpHqTKzhh8i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.695a3ded48fd23187f83adee755f3c90.exe
Files
-
NEAS.695a3ded48fd23187f83adee755f3c90.exe.exe windows:4 windows x86
616d060f84174fbe550615d295f4ce51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocaleInfoA
lstrcpyn
CreateNamedPipeA
GetEnvironmentVariableA
GetExitCodeThread
OpenEventW
GetLogicalDriveStringsA
CopyFileExW
SetPriorityClass
GetProcAddress
CreateMutexA
CreateMutexW
QueryPerformanceCounter
CreateThread
SetUnhandledExceptionFilter
OpenMutexW
GetExitCodeProcess
GlobalGetAtomNameA
GetFileTime
GetCalendarInfoA
MulDiv
CreateFileMappingW
CreateMailslotA
FreeResource
LocalFree
DeleteAtom
GetVolumeInformationA
RaiseException
AddAtomA
GlobalFindAtomW
RemoveDirectoryW
GlobalFindAtomA
CreateMailslotW
GetProcessHeaps
EndUpdateResourceA
CopyFileExA
CreateNamedPipeW
SleepEx
GetModuleHandleA
WaitForSingleObject
GetSystemDefaultLangID
SetEvent
TlsAlloc
SetCalendarInfoW
GetLastError
GetFileSize
lstrlen
DuplicateHandle
GetAtomNameW
GetStringTypeW
CreateFileA
user32
CheckMenuItem
GetDC
DefDlgProcW
BringWindowToTop
GetDlgItem
EnumWindows
PeekMessageW
SetCursor
GetWindowLongA
MessageBoxIndirectW
CreatePopupMenu
keybd_event
GetWindowTextLengthA
gdi32
CreateFontIndirectExA
CreatePolygonRgn
CreateDIBitmap
GetLogColorSpaceW
SetGraphicsMode
GdiGetBatchLimit
ScaleWindowExtEx
SelectObject
GetEnhMetaFileHeader
GetFontData
SetLayout
SetRectRgn
ExtSelectClipRgn
EnumFontFamiliesA
GetAspectRatioFilterEx
GetNearestPaletteIndex
PolylineTo
PatBlt
SelectClipRgn
advapi32
RegEnumValueW
RegReplaceKeyA
RegCreateKeyW
RegQueryValueA
RegCreateKeyExA
RegReplaceKeyW
RegCloseKey
shlwapi
PathGetArgsW
ChrCmpIA
StrSpnW
PathAddBackslashW
PathIsUNCA
SHRegOpenUSKeyW
PathIsPrefixA
PathCompactPathExA
comctl32
FlatSB_SetScrollRange
InitCommonControls
winspool.drv
AddFormW
EnumMonitorsW
OpenPrinterW
GetJobW
DeleteMonitorA
EndDocPrinter
AddPrinterConnectionW
SetPrinterDataExW
inetcomm
MimeOleParseRfc822Address
MimeOleParseRfc822AddressW
HrGetAttachIcon
EssSecurityLabelEncodeEx
MimeOleGetDefaultCharset
MimeOleGetFileExtension
HrAttachDataFromFile
EssKeyExchPreferenceEncodeEx
EssSignCertificateDecodeEx
MimeOleSMimeCapGetHashAlg
EssKeyExchPreferenceDecodeEx
MimeOleGetCharsetInfo
MimeOleGetCertsFromThumbprints
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.j Size: 1KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nkytZ Size: 1024B - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.N Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fc Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 2KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.w Size: 2KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ