Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e983ac9ddd9c617cc35a10bef2e13f30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e983ac9ddd9c617cc35a10bef2e13f30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e983ac9ddd9c617cc35a10bef2e13f30.exe
-
Size
197KB
-
MD5
e983ac9ddd9c617cc35a10bef2e13f30
-
SHA1
c75cc6d3fd109cd7eca4ac5573f2c9f2ee74c777
-
SHA256
20f2b19a492df314387223364a96ac3809a6d523b9826fd13bea0a6f7314ac6a
-
SHA512
5c6b26616fa01c10692e878648b0dd4c5d680cc0fde2c26c0b909a8a78eb05c48365d06192c4a807d19fe9f384cd12d0921cc21f5c01f0411b22de38172b7b5e
-
SSDEEP
3072:ouNocWJl5cZI36wEJImINsISfc9TBfNpiB5BstGnQULq53CaPZd3hWMrSDysaYEL:9SJH2JImISISfc9TBnig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e983ac9ddd9c617cc35a10bef2e13f30.exe
Files
-
NEAS.e983ac9ddd9c617cc35a10bef2e13f30.exe.exe windows:5 windows x86
67ba815776fc900133245de50ac27a19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetExitCodeProcess
CreateProcessA
CreateDirectoryA
RemoveDirectoryA
GetTempFileNameA
CopyFileA
GetFullPathNameA
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
SetFileTime
GetShortPathNameA
FormatMessageA
GetDiskFreeSpaceA
GetSystemDirectoryA
GetVersionExA
FreeLibrary
LocalFree
LocalAlloc
lstrcmpiA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
LoadLibraryA
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetConsoleMode
GetConsoleCP
GetStdHandle
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
GetProcAddress
CreateFileA
WriteFile
lstrlenA
DeleteFileA
MoveFileA
SetEndOfFile
CloseHandle
SetFilePointer
ReadFile
GetFileSize
SearchPathA
GetModuleFileNameA
GetCommandLineA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CompareStringW
GetLocalTime
HeapFree
HeapAlloc
GetModuleHandleW
ExitProcess
GetStartupInfoA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapCreate
GetProcessHeap
user32
wsprintfA
GetMessageA
IsDialogMessageA
LoadIconA
LoadCursorA
RegisterClassA
DefWindowProcA
PostQuitMessage
EnumWindows
DestroyWindow
FindWindowA
RegisterWindowMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextA
SetWindowTextA
FlashWindow
IsIconic
SetForegroundWindow
CreateWindowExA
MessageBoxA
LoadImageA
CreateDialogParamA
SendMessageA
InvalidateRect
SetDlgItemTextA
EnableWindow
GetDlgItem
ShowWindow
GetClientRect
IsRectEmpty
BeginPaint
FillRect
ReleaseDC
EndPaint
SetRect
SetRectEmpty
PostMessageA
GetSystemMetrics
GetWindowRect
SetWindowPos
gdi32
GetStockObject
CreateSolidBrush
SetBkMode
Rectangle
SetTextColor
ExtTextOutA
DeleteObject
GetTextExtentPoint32A
advapi32
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ