Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a13244d3c83c04046a0c3f9d3d87db14.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.a13244d3c83c04046a0c3f9d3d87db14.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a13244d3c83c04046a0c3f9d3d87db14.exe
-
Size
329KB
-
MD5
a13244d3c83c04046a0c3f9d3d87db14
-
SHA1
b7c4a670ff04b8ba424fa2cc0a11df1d0c6cc555
-
SHA256
ae882e6ac5fbae79dd41f91aa5e81623b40fb59be0968259b14f50a9b9ea53b7
-
SHA512
8e9990aa23c8bb2a127e92228e8ed841da8a7af2e8082af0da7b90c6abffc520396008e0b5302ae590b7e33984bd587361754ba04730dcc4f49fb4d0cf686427
-
SSDEEP
6144:Wl+gXiu9tcN2CVy0bTgwa0LlecMnmcCNRj/8aR5cij71cpu8xPyn1SXQyNHLFwy:0ZXOHxbTgn0Bv1cEj/8qXjKprCQAyVBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a13244d3c83c04046a0c3f9d3d87db14.exe
Files
-
NEAS.a13244d3c83c04046a0c3f9d3d87db14.exe.exe windows:4 windows x86
8ed518f930e861568e36c94d1c546e1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VirtualProtect
HeapCreate
SetConsoleCP
CloseHandle
WaitForMultipleObjects
CompareFileTime
HeapReAlloc
lstrlenA
GetStdHandle
WaitForSingleObject
GetSystemDefaultLangID
GetModuleHandleA
GetCommandLineA
GetAtomNameA
SuspendThread
GetConsoleCP
GetVersion
LoadLibraryExA
InterlockedExchange
GlobalUnlock
user32
GetKeyState
EnableScrollBar
SetWindowPos
CreateIcon
DrawCaption
GetCursorInfo
GetKeyboardLayout
InvertRect
InsertMenuA
SetPropA
FillRect
DestroyMenu
SetScrollInfo
DispatchMessageA
IsDialogMessage
DragObject
FindWindowA
GetDlgItem
CreateMenu
DialogBoxParamA
advapi32
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyA
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ