Static task
static1
Behavioral task
behavioral1
Sample
NEAS.529e2fb92fc93fdacc14c7164ddbda40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.529e2fb92fc93fdacc14c7164ddbda40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.529e2fb92fc93fdacc14c7164ddbda40.exe
-
Size
144KB
-
MD5
529e2fb92fc93fdacc14c7164ddbda40
-
SHA1
4cb9b5e260eff82225c615c96d4f3beab2786580
-
SHA256
da7cc550060f78b457acaf7a8c46ff93c18f88b83bfba508fa882537dc429b6d
-
SHA512
1f9631d22fe3bb4c37ab2d987f57fbd7bb1d2190f1a37d7b5ddecc1d5ad061498f0b1fe81cc79bb6d88feb3ea33339d320d1d42716157933863fc425a822376e
-
SSDEEP
1536:ZJg6wdmNr9ZDdVJDv1rZmeW8QJktUHrLhdhQ3ExUSH/pkn:7edy1a8QJktUHhdhQ34U2/pkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.529e2fb92fc93fdacc14c7164ddbda40.exe
Files
-
NEAS.529e2fb92fc93fdacc14c7164ddbda40.exe.exe windows:4 windows x86
c603e82365b8197f285ae9bcb8e9aff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetModuleFileNameA
Sleep
TerminateProcess
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
HeapSize
WideCharToMultiByte
FindResourceA
GetLastError
SizeofResource
GetCurrentProcess
GetModuleHandleA
GetStdHandle
ExitProcess
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
user32
MessageBoxA
LoadStringA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ