Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fe6aa6b62ec619150b2b02d0bbf412d0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.fe6aa6b62ec619150b2b02d0bbf412d0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.fe6aa6b62ec619150b2b02d0bbf412d0.exe
-
Size
311KB
-
MD5
fe6aa6b62ec619150b2b02d0bbf412d0
-
SHA1
00c9387661e70c14a9864bf924a4a337b8659494
-
SHA256
e93e1bc916a1c530997476aa46c20e09954403519d49063aecb3bd7cf1b3d015
-
SHA512
c87a62455255f33711ebfd782da86ebe767569a78e1fc27d26b56561e2a24f50c9a2e4323284603a6446d706f2eecd227503e0ff6d2fce2887a81b348c2ae440
-
SSDEEP
3072:zjlomiD4ecS37wnKHZtRjHAUUpP+/JNYnr9gg24Fic0STdy9KPr7gkCWaHR+i6Z/:P3AE2wKDWneR2H0STdqIGjbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.fe6aa6b62ec619150b2b02d0bbf412d0.exe
Files
-
NEAS.fe6aa6b62ec619150b2b02d0bbf412d0.exe.exe windows:6 windows x86
734710ec9abfe08ff5cc457a9ef77884
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCBrushColor
user32
WindowFromDC
EnableWindow
ValidateRgn
advapi32
RegSetKeySecurity
kernel32
CreateFileW
WriteConsoleW
CloseHandle
GetCurrentThreadId
QueryPerformanceCounter
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
HeapReAlloc
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
DecodePointer
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zs7 Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ