Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2c5ae5c1672c90614f57e3830cf6b6e0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.2c5ae5c1672c90614f57e3830cf6b6e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2c5ae5c1672c90614f57e3830cf6b6e0.exe
-
Size
170KB
-
MD5
2c5ae5c1672c90614f57e3830cf6b6e0
-
SHA1
6fa434e46ddb3f40e1582f57fa9516f62e3d6ea2
-
SHA256
f8df405064c700577b60e792b11a419d2f8b857f6f2e6664df05c79517c749ce
-
SHA512
341e16249a89ea914c3ce75c9f54474dcfc52fa11c3d4c53ea7062e4d168d7d967c71681e12d4490d90b746ddf63401285239f1123f9c5873f6b94aece576de0
-
SSDEEP
1536:s9SsmEuUQ0/Siir+jJuCGEvkznmP+upxEJcoLN4LZ8BSaPXDew:uT/NbGEv8mWupxEKoBuiB/XDd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2c5ae5c1672c90614f57e3830cf6b6e0.exe
Files
-
NEAS.2c5ae5c1672c90614f57e3830cf6b6e0.exe.exe windows:4 windows x86
b52f1898b4b003f762f5b9c03e005e8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
GetClassNameA
IsWindowVisible
GetAsyncKeyState
GetWindow
GetWindowThreadProcessId
kernel32
ReadFile
LCMapStringA
LoadLibraryA
FreeLibrary
Sleep
GetLocalTime
GetStartupInfoA
CreateProcessA
OpenProcess
GetModuleHandleA
GetProcAddress
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
CloseHandle
WaitForSingleObject
GetExitCodeThread
VirtualProtectEx
WriteProcessMemory
CreateToolhelp32Snapshot
Module32First
CreateThread
OpenEventA
CreateEventA
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
WriteFile
GetFileSize
CreateFileA
MoveFileA
DeleteFileA
msvcrt
malloc
_CIfmod
_CIpow
strchr
realloc
memmove
__CxxFrameHandler
sprintf
strncpy
atoi
??3@YAXPAX@Z
strncmp
??2@YAPAXI@Z
modf
_ftol
free
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ