Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3ab69e326703dc51a345196c8bccf1f0.dll
Resource
win7-20231023-en
General
-
Target
NEAS.3ab69e326703dc51a345196c8bccf1f0.exe
-
Size
6.1MB
-
MD5
3ab69e326703dc51a345196c8bccf1f0
-
SHA1
b4f8729338c597819b2b988e2379de909c69cd6b
-
SHA256
37b3682c22002c87f5ea5c491bf1ef2544133df19a3ef69a631ff69722ac2935
-
SHA512
a2170e033759c2d40192d61a5de392b6c3d947c45c060d2dcfe00377c49614af1cd8d16c153b6f27312563c06a277b7e1e8d73b79cc20d4404d7f30eb2df49a2
-
SSDEEP
98304:fcuoTWEDSnlPji5ZXia80BJB5XWo6YZ4O1FYOZWGnSX9pc4+wnJOc0A/4G:EueSnVjCBA0BJBxTa0YgR07cHiJN0c4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3ab69e326703dc51a345196c8bccf1f0.exe
Files
-
NEAS.3ab69e326703dc51a345196c8bccf1f0.exe.dll windows:6 windows x86 arch:x86
d116723ab05e2d5b12d64c1bb1073b81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FileTimeToSystemTime
GetTimeZoneInformation
SetEndOfFile
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
ReadFile
GetFileSize
GlobalMemoryStatus
FlushFileBuffers
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetOEMCP
GetFileType
GetStdHandle
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteCriticalSection
VirtualProtect
FindNextFileA
GetSystemInfo
DeviceIoControl
IsValidCodePage
GetACP
GetSystemDirectoryA
GetModuleFileNameW
GetFileAttributesA
HeapDestroy
GetVersionExW
TlsSetValue
GetLogicalDrives
GetUserDefaultLCID
GlobalLock
GetConsoleMode
TlsGetValue
GetCommandLineW
GetCurrentProcessId
GetThreadPriority
SetFilePointer
CreateEventW
VerifyVersionInfoW
GetTempPathW
LoadLibraryExW
GetConsoleCP
ExitProcess
GetProcessHeap
IsDebuggerPresent
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
user32
GetMessageA
CopyRect
DrawIconEx
DrawStateW
TrackPopupMenu
SetScrollRange
CheckMenuRadioItem
SetWindowLongA
GetWindowLongA
GetWindow
EnableScrollBar
AppendMenuA
FlashWindow
SetMenuItemInfoW
DeleteMenu
CharLowerBuffW
CreateMenu
ShowCaret
GetCapture
MessageBoxA
DestroyCaret
GetSysColorBrush
EndMenu
ReleaseDC
gdi32
CreatePolygonRgn
SetLayout
TranslateCharsetInfo
SetTextColor
StretchBlt
CopyEnhMetaFileA
CreatePalette
RectInRegion
SetMapMode
Ellipse
SelectPalette
CreateRectRgn
GetCharABCWidthsFloatA
PatBlt
PtInRegion
CreateBrushIndirect
SetPolyFillMode
GetPixel
RectVisible
advapi32
SetSecurityDescriptorDacl
RegUnLoadKeyW
RegSetValueExW
ControlService
RegConnectRegistryW
SetSecurityDescriptorOwner
RegDeleteKeyA
CopySid
shell32
ShellExecuteW
oleaut32
SafeArrayGetUBound
Sections
.text Size: 494KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ