Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f0824100f37fccb3e4c96d99eaf75c80.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f0824100f37fccb3e4c96d99eaf75c80.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.f0824100f37fccb3e4c96d99eaf75c80.exe
-
Size
163KB
-
MD5
f0824100f37fccb3e4c96d99eaf75c80
-
SHA1
fba1223b7d152261bf4aa01a6ea9ac4d7900d320
-
SHA256
379ab042ab8af25690f42bb23fd1a1d645184c7d092366a801e8637d57f9fe3b
-
SHA512
8c8a7279557f7b9b061128db6ccdc84294357821cb143e8963b021580d636e55e278ecf63d948bb35318192bb240380676b397a0a55639f6b7011cd607a215d3
-
SSDEEP
3072:JjnaOOgztVt+Mw3WibWH8RLZDEn5/n6l2ccz/dJEf8:Rna0Zw3WyWH8RLZDE5vhcc7d88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f0824100f37fccb3e4c96d99eaf75c80.exe
Files
-
NEAS.f0824100f37fccb3e4c96d99eaf75c80.exe.exe windows:1 windows x86
2f8d878a47a535c404fa597730bcdfcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertCloseStore
CryptBinaryToStringW
CertFreeCertificateContext
user32
DefWindowProcW
EnableMenuItem
GetClientRect
GetCursorPos
GetDesktopWindow
GetMenu
GetSystemMetrics
GetWindow
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetTimer
SetWindowTextW
SystemParametersInfoW
UpdateWindow
kernel32
CloseHandle
DeleteFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
GetVersionExW
LoadLibraryA
LoadLibraryW
VirtualProtect
lstrlenW
GetStartupInfoW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
gdi32
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
SetRectRgn
CreateRectRgn
Sections
AUTO Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ