Static task
static1
Behavioral task
behavioral1
Sample
NEAS.aece9d02908f86973efcc30b266a1510.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.aece9d02908f86973efcc30b266a1510.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.aece9d02908f86973efcc30b266a1510.exe
-
Size
192KB
-
MD5
aece9d02908f86973efcc30b266a1510
-
SHA1
525802d51ee3b317381c5ea127134985acd107f9
-
SHA256
884aaecbdb9775c78adce5f1864fddf8cf44b5a0fed4c6bcf271e07332c2608e
-
SHA512
ed8a83d68157ae4d4e7bac072c4c306d2bbedcf70adc3ad28733bb78a04f6608b67ae407c50096863fbfcc27713c2d1fe01c06a6f6a1226ca1f344bd7a8083b8
-
SSDEEP
3072:8VCCe7uttWl8yHGkqtjtjcFOtACkhNk7OKNIEIxPctsRXQgT1:lCe7utEl1qWOt44O0TIVXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.aece9d02908f86973efcc30b266a1510.exe
Files
-
NEAS.aece9d02908f86973efcc30b266a1510.exe.exe windows:4 windows x86
80d2fe98739b81bd88bca2dd91ffde52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetPrivateProfileIntA
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
FreeLibrary
InterlockedDecrement
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
WritePrivateProfileStringA
GetVersionExA
GetModuleFileNameW
GetModuleFileNameA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
SetUnhandledExceptionFilter
InterlockedExchange
user32
CreateDialogIndirectParamA
GetDesktopWindow
GetSysColorBrush
LoadCursorA
UnregisterClassA
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
PostQuitMessage
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
GetNextDlgTabItem
GetKeyState
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetWindowPlacement
GetWindow
SystemParametersInfoA
DestroyMenu
GetSysColor
CheckMenuItem
InsertMenuA
SendMessageA
DrawMenuBar
GetSystemMenu
IsIconic
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuState
EndDialog
ShowWindow
SetWindowTextA
IsDialogMessageA
MapWindowPoints
SetDlgItemTextA
BringWindowToTop
GetWindowRect
RedrawWindow
FindWindowA
GetLastActivePopup
LoadIconA
RegisterClassA
DefDlgProcA
GetClassInfoA
TranslateAcceleratorA
MessageBeep
LoadAcceleratorsA
EnableWindow
LoadBitmapA
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxA
GetParent
GetSystemMetrics
SetWindowPos
FillRect
CopyRect
FrameRect
SetForegroundWindow
gdi32
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtTextOutA
CreateBitmap
TextOutA
RectVisible
PtVisible
GetObjectA
GetClipBox
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateCompatibleDC
GetMapMode
SetMapMode
DPtoLP
BitBlt
DeleteDC
GetBkColor
CreateSolidBrush
GetStockObject
SelectObject
MoveToEx
LineTo
GetTextExtentPoint32A
DeleteObject
CreateFontIndirectA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
shlwapi
PathFindExtensionA
PathFindFileNameA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ