Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d91ecf0f55c07136135dbaea1d0a6f40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d91ecf0f55c07136135dbaea1d0a6f40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.d91ecf0f55c07136135dbaea1d0a6f40.exe
-
Size
1016KB
-
MD5
d91ecf0f55c07136135dbaea1d0a6f40
-
SHA1
67e2d44e9cc741150a3640c083a8abc0f881e8e6
-
SHA256
a3736a3f1131a3fddaddac9f7992fe5622f8cb459efd36af77232882c20781d9
-
SHA512
f5c3bd58584704f2bb95421608acf6b20590a0634227203b4271cf885f8b99f473880a5033bf32a0f4bf2b9c897d18e6463c7ac32f7700d3aa76422b919a9bd6
-
SSDEEP
24576:CV29w5HC+ggLqaQsftaAtNoJYhrQbv49N248wl6K:L9w5SgL7taAkJYxQkb81K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d91ecf0f55c07136135dbaea1d0a6f40.exe
Files
-
NEAS.d91ecf0f55c07136135dbaea1d0a6f40.exe.exe windows:6 windows x86
77cbb46c4d1ad7208190ad3de096bce5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
GetOEMCP
GetCPInfo
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
GetTickCount
GetSystemTimeAsFileTime
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetCommandLineA
RtlUnwind
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
ExitThread
LocalReAlloc
GetModuleHandleExW
AreFileApisANSI
IsDebuggerPresent
IsProcessorFeaturePresent
SetStdHandle
GetFileType
HeapQueryInformation
IsValidCodePage
GetStringTypeW
CreateFileW
GetStdHandle
GetStartupInfoW
WriteConsoleW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
CreateSemaphoreW
FatalAppExitA
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
OutputDebugStringW
SetEnvironmentVariableA
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameA
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
GetCurrentThread
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
SystemTimeToFileTime
FileTimeToSystemTime
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetThreadLocale
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
GetACP
MultiByteToWideChar
Sleep
CreateThread
TerminateThread
WaitForSingleObject
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
GetLastError
RaiseException
LeaveCriticalSection
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
OpenFile
MulDiv
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
CreateFileA
FindNextFileA
DeleteFileA
CreateDirectoryA
GetTempPathA
GetFileAttributesA
GetModuleFileNameA
FindClose
FindFirstFileA
GetTimeZoneInformation
GetSystemTime
lstrcpyA
FindResourceW
LoadResource
LockResource
SizeofResource
ExitProcess
WideCharToMultiByte
user32
SetTimer
KillTimer
DrawIcon
SetWindowRgn
GetDialogBaseUnits
UnionRect
GetDCEx
LockWindowUpdate
GetNextDlgGroupItem
RegisterClipboardFormatA
LoadAcceleratorsW
LoadMenuW
PostThreadMessageA
ScrollWindowEx
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsZoomed
RealChildWindowFromPoint
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
GetWindow
OffsetRect
CopyRect
CharNextA
GetDlgCtrlID
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetParent
SendDlgItemMessageA
GetSystemMenu
EnableMenuItem
GetWindowLongA
EndDialog
GetDlgItem
SetWindowLongA
DialogBoxParamA
DialogBoxIndirectParamA
SendMessageA
LoadCursorA
IsWindow
ReuseDDElParam
UnregisterClassA
LoadBitmapW
RedrawWindow
PtInRect
InflateRect
GetWindowRect
FrameRect
ReleaseDC
GetWindowDC
SystemParametersInfoA
MessageBeep
WindowFromPoint
DestroyIcon
GetSysColor
UpdateWindow
InvalidateRect
CopyImage
GetMenuItemInfoA
SetRect
InvalidateRgn
CopyAcceleratorTableA
GetSysColorBrush
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
ShowOwnedPopups
MapDialogRect
GetClientRect
EnableWindow
PostMessageA
SetWindowContextHelpId
PostQuitMessage
SetParent
IsRectEmpty
DeleteMenu
SetFocus
GetSystemMetrics
UnpackDDElParam
GetMenuBarInfo
LoadImageA
IntersectRect
SetRectEmpty
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetWindowThreadProcessId
GetDesktopWindow
GetNextDlgTabItem
CreateDialogIndirectParamA
DestroyCursor
LoadCursorW
SetCursor
SetCursorPos
ReleaseCapture
SetCapture
IsIconic
FillRect
ClientToScreen
EndPaint
BeginPaint
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
SetWindowTextA
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
IsDialogMessageA
DrawTextA
gdi32
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
DeleteObject
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
PatBlt
CreateCompatibleBitmap
GetTextMetricsA
CreateFontA
GetCharWidthA
StretchDIBits
CombineRgn
CreateRectRgnIndirect
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
CreateBitmap
SetTextColor
SetBkColor
GetTextColor
GetBkColor
CreateDCA
CopyMetaFileA
DeleteDC
ExtTextOutA
ModifyWorldTransform
GetObjectA
GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetTextExtentPoint32A
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyA
RegQueryValueExA
RegEnumKeyExA
GetFileSecurityA
SetFileSecurityA
RegEnumValueA
RegOpenKeyExW
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
shell32
SHAddToRecentDocs
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHGetFileInfoA
ExtractIconA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
comctl32
ImageList_AddMasked
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
uxtheme
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData
DrawThemeText
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
ole32
CLSIDFromProgID
CoCreateGuid
CoUninitialize
StringFromGUID2
CLSIDFromString
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleRun
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
PropVariantCopy
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoRegisterClassObject
CoTreatAsClass
CoDisconnectObject
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleDuplicateData
CoRevokeClassObject
oleaut32
VariantClear
VariantTimeToSystemTime
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
VariantInit
VariantChangeType
SysReAllocStringLen
SysStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysAllocString
SystemTimeToVariantTime
oledlg
ord8
gdiplus
GdiplusShutdown
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
Sections
.text Size: 705KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ