Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c3f4478469008d20cb6b03ae316ceb90.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.c3f4478469008d20cb6b03ae316ceb90.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.c3f4478469008d20cb6b03ae316ceb90.exe
-
Size
96KB
-
MD5
c3f4478469008d20cb6b03ae316ceb90
-
SHA1
facc780e1cdc25e982d6f0c00e9b6d52af0f3c4c
-
SHA256
fa7fcab73c3bbf26a0e18c591456145459b66931d8fc29455ae13fa296fb698b
-
SHA512
82c067f5a9c1264ff71c5cb974f6a05bdb8b18047932bbf565399bc2fd29880275e5ba8ff3073c6fd45493f2640d3d086301bb211d84da3095a733cca9ac4476
-
SSDEEP
768:3eNJtyPwenzLAOCLQPOfo19J5Nj3p3Rowqd2gN60ZoWfmE00kwZASkHZL65wW5e4:uvtQAO9VH3z+vl/kwqSkRcw6N5tFp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c3f4478469008d20cb6b03ae316ceb90.exe
Files
-
NEAS.c3f4478469008d20cb6b03ae316ceb90.exe.exe windows:4 windows x86
3e5de67470892b7999441ce4bf42ad2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLastError
MultiByteToWideChar
GetModuleFileNameA
WritePrivateProfileStringA
GetFileAttributesA
GetVersionExA
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
GetACP
WideCharToMultiByte
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetLocaleInfoA
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
SetFilePointer
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
user32
TranslateMessage
DefWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
CreateWindowExA
RegisterClassA
GetClassInfoA
SetWindowPos
SetActiveWindow
IsWindowEnabled
SetForegroundWindow
GetMessageA
SystemParametersInfoA
DispatchMessageA
GetClientRect
GetParent
MoveWindow
PostQuitMessage
PostMessageA
SendMessageA
KillTimer
SetTimer
FindWindowA
IsWindow
wsprintfA
MessageBoxA
GetForegroundWindow
DestroyWindow
gdi32
GetStockObject
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ