Static task
static1
Behavioral task
behavioral1
Sample
NEAS.684a41266195cd02e42887874cc2e4f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.684a41266195cd02e42887874cc2e4f0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.684a41266195cd02e42887874cc2e4f0.exe
-
Size
1.9MB
-
MD5
684a41266195cd02e42887874cc2e4f0
-
SHA1
9b25bb34109d91d3710865da5300720b2fc485be
-
SHA256
b2c4576360f709362edf2550fc18289cd4662eadf65b3011e81b029d2c29a260
-
SHA512
4c3d3b0ef1d7d22e1bcb6a6b5866f697d58f4ac8baae081d2e05f0337ab02a8bd35fcb15854159b437e95f0321b213210c7c5f81c51bf30d893df9b660c7cfcc
-
SSDEEP
24576:KUY+9+7iKldCfOrbHBAVTx3tuiNu4nwBdxV2RmXG1oALM0leKaRxRrDM1o6RyFhE:9V9+rLCfAI33cGRmT0leKaNpOIuYHtw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.684a41266195cd02e42887874cc2e4f0.exe
Files
-
NEAS.684a41266195cd02e42887874cc2e4f0.exe.exe windows:4 windows x86
00b39715fe34c4ddf74478b4fd9d527b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmMetrics
acmStreamClose
acmGetVersion
winmm
mciGetYieldProc
waveOutGetVolume
mciGetErrorStringW
mpr
WNetCloseEnum
WNetOpenEnumA
comctl32
ord17
InitCommonControlsEx
kernel32
RtlUnwind
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetStartupInfoW
GetProcAddress
GetLocaleInfoA
DeleteCriticalSection
CloseHandle
ClearCommError
OpenMutexA
CreateMutexA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
CreateMutexW
GetLastError
user32
PeekMessageW
PostMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageW
SetActiveWindow
SetCapture
MoveWindow
SetClassLongA
SetClipboardData
SetCursor
SetFocus
SetKeyboardState
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
SystemParametersInfoA
TabbedTextOutA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
WaitMessage
VkKeyScanA
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorFromFileA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
PeekMessageA
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextA
GetKeyboardType
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExA
FillRect
ExitWindowsEx
EqualRect
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawTextA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjectsEx
InvalidateRect
MsgWaitForMultipleObjects
SendMessageTimeoutW
SetTimer
UpdateWindow
ShowWindow
CreateWindowExW
PostQuitMessage
EnumWindows
SetForegroundWindow
SendMessageA
FindWindowA
ActivateKeyboardLayout
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffA
CharToOemA
CharNextW
CharNextA
CharLowerBuffA
CharLowerA
CallWindowProcA
CallNextHookEx
SetCaretPos
gdi32
CreateCompatibleBitmap
CreateDIBitmap
CreateDIBSection
CreateBrushIndirect
CreateDCA
CreateCompatibleDC
CreateBitmap
CreateEllipticRgn
CreateEnhMetaFileA
CreateFontIndirectA
CreateHalftonePalette
CreateICA
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesA
ExcludeClipRect
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDeviceCaps
CopyEnhMetaFileA
GetDIBits
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polygon
Polyline
PtInRegion
RealizePalette
Rectangle
RectVisible
ResizePalette
RestoreDC
SaveDC
SelectClipPath
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
CombineRgn
CloseEnhMetaFile
GetDIBColorTable
SetWinMetaFileBits
TranslateCharsetInfo
StretchDIBits
StartPage
StartDocA
BitBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetPaletteEntries
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBits
SetDIBColorTable
shell32
Shell_NotifyIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ole32
OleDraw
IsAccelerator
CreateStreamOnHGlobal
CoUninitialize
OleRun
CoTaskMemAlloc
CoInitialize
CoGetClassObject
CoCreateInstance
OleSetMenuDescriptor
ProgIDFromCLSID
StringFromCLSID
CoTaskMemFree
Sections
.text Size: 412KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata1 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sj831 Size: 999KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE