Static task
static1
Behavioral task
behavioral1
Sample
NEAS.63e07fd2ae9a22caf2a74a516bea1b70.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.63e07fd2ae9a22caf2a74a516bea1b70.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.63e07fd2ae9a22caf2a74a516bea1b70.exe
-
Size
170KB
-
MD5
63e07fd2ae9a22caf2a74a516bea1b70
-
SHA1
0b5ebc90a2eeda9cbea3659e5d10523386d70a3c
-
SHA256
7c575b5137bf0821d31d09649a2ff6580fb60d09eef36a541f6aadabf87aac27
-
SHA512
6c31ae35c0dfebb6b95398c07972f1344f3e889e0b3859069c2bca19cbd8a948937d0c14e034b6a20e626f31f0e8f59e571ab9b213c1c585b51c4759becb13db
-
SSDEEP
1536:s9SsmEuUQ0/Siir+jJuCGEvkznmP+upxEJcoLN4LZ8BSaPXDe5:uT/NbGEv8mWupxEKoBuiB/XDQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.63e07fd2ae9a22caf2a74a516bea1b70.exe
Files
-
NEAS.63e07fd2ae9a22caf2a74a516bea1b70.exe.exe windows:4 windows x86
b52f1898b4b003f762f5b9c03e005e8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
GetClassNameA
IsWindowVisible
GetAsyncKeyState
GetWindow
GetWindowThreadProcessId
kernel32
ReadFile
LCMapStringA
LoadLibraryA
FreeLibrary
Sleep
GetLocalTime
GetStartupInfoA
CreateProcessA
OpenProcess
GetModuleHandleA
GetProcAddress
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
CloseHandle
WaitForSingleObject
GetExitCodeThread
VirtualProtectEx
WriteProcessMemory
CreateToolhelp32Snapshot
Module32First
CreateThread
OpenEventA
CreateEventA
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
WriteFile
GetFileSize
CreateFileA
MoveFileA
DeleteFileA
msvcrt
malloc
_CIfmod
_CIpow
strchr
realloc
memmove
__CxxFrameHandler
sprintf
strncpy
atoi
??3@YAXPAX@Z
strncmp
??2@YAPAXI@Z
modf
_ftol
free
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ