Static task
static1
Behavioral task
behavioral1
Sample
NEAS.942653a95519c3dd82167d970bbffe60.dll
Resource
win7-20231023-en
General
-
Target
NEAS.942653a95519c3dd82167d970bbffe60.exe
-
Size
6.1MB
-
MD5
942653a95519c3dd82167d970bbffe60
-
SHA1
e06f01e366bd74a6f5e515e3781887e0e88569b6
-
SHA256
86674805399cb9dff211826870a2ba340740d05a3d6914aa16c991d9dc9f3a16
-
SHA512
7ae30cd1a6319bf685fef84c86350060de7ec247db7f424425cd25c044f01cf189314322225f4d8af3ae3c7fd868a5ce80af792a24c870b08ce8f616c595a3ea
-
SSDEEP
98304:CTs3FEHzEpqhqcIcdU/I3e8Kj7bxDRNpZ8LCQm3SmrhsPfW:p+HIp6VILQ3e8Kj7bxzpZg1TW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.942653a95519c3dd82167d970bbffe60.exe
Files
-
NEAS.942653a95519c3dd82167d970bbffe60.exe.dll windows:6 windows x86
575cbd66234e3988ac604dc35b7e00b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetStdHandle
LoadLibraryExW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
OutputDebugStringW
WriteFile
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteConsoleW
ReadConsoleW
CreateFileW
SetEndOfFile
SetDllDirectoryW
SystemTimeToTzSpecificLocalTime
ResetEvent
GetFileAttributesW
GetEnvironmentVariableW
SuspendThread
GetWindowsDirectoryW
GetModuleFileNameA
LoadLibraryA
GetPrivateProfileIntW
FlushFileBuffers
WritePrivateProfileStringW
GetSystemDirectoryA
FileTimeToSystemTime
MulDiv
GetVersionExW
HeapCreate
GetTickCount
GetModuleHandleExW
VerSetConditionMask
SystemTimeToFileTime
GetDriveTypeW
GetModuleFileNameW
TlsGetValue
CloseHandle
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ExitProcess
AreFileApisANSI
HeapSize
user32
SetKeyboardState
GetWindow
ShowCursor
DestroyCaret
GetDlgItemTextA
SetTimer
CharUpperBuffW
MsgWaitForMultipleObjects
AttachThreadInput
RemovePropA
MessageBeep
GetScrollInfo
MessageBoxA
GetWindowLongA
GetWindowTextW
DestroyCursor
SendDlgItemMessageW
CreatePopupMenu
ScrollWindowEx
SetCaretPos
MapWindowPoints
CheckMenuItem
CreateMenu
gdi32
ExtCreatePen
MoveToEx
EndPage
SetLayout
StretchBlt
SelectClipRgn
CombineRgn
SetMapMode
RealizePalette
GetObjectType
GetTextExtentPointW
SetStretchBltMode
SetViewportExtEx
SetROP2
SetTextAlign
CreateDIBitmap
GetStockObject
ExtTextOutA
CreateEnhMetaFileW
CreateSolidBrush
LineTo
advapi32
SetSecurityDescriptorOwner
AllocateAndInitializeSid
LookupPrivilegeValueW
RegDeleteKeyA
EqualSid
RegCloseKey
shell32
ExtractIconExW
Sections
.text Size: 479KB - Virtual size: 479KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.6MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ