Static task
static1
Behavioral task
behavioral1
Sample
neptunium.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
neptunium.exe
Resource
win10v2004-20230703-en
General
-
Target
neptunium.exe
-
Size
1.3MB
-
MD5
94259b5ad79024a5b6f5388f18ec061f
-
SHA1
975251f1d30d9e0c41a88ff58eaa98283d0b2c01
-
SHA256
100b97224063dbaea25b4d53672b7e3fc81443aeef10151c47096ffb3c849334
-
SHA512
1b66ddb7fecf930680557ca2e036902b6ac60754fb5fecf5283ad66c45dadfe0a1f1a876ca4a8ced007008c03df0b1720011bf5be692c5cd8db2ce8f3c63ee82
-
SSDEEP
24576:ImaUgySjNqBEmg4KDPowWMCRd53M9MNMVBvtEMFlMoYMMMsMMMLUMgMMMMM3wMMN:2qqmg4kPowWMCRd53M9MNMVBvtEMFlMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource neptunium.exe
Files
-
neptunium.exe.exe windows x86
67219f66e5d61666cb86838ad4a0ad18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutOpen
waveOutPrepareHeader
PlaySoundW
kernel32
GetModuleHandleW
WideCharToMultiByte
VirtualFree
VirtualAlloc
LoadLibraryW
GetProcAddress
FreeLibrary
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetFileType
LCMapStringW
GetACP
GetModuleHandleExW
ExitProcess
MultiByteToWideChar
HeapAlloc
CreateThread
CloseHandle
TerminateThread
GetLastError
Sleep
CreateFileW
FindClose
DecodePointer
SetThreadPriority
WriteFile
lstrlenW
GetCurrentProcess
HeapFree
GetProcessHeap
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
GetOEMCP
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
GetModuleFileNameA
user32
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
DispatchMessageW
TranslateMessage
LoadCursorW
UpdateLayeredWindow
EnumDisplayMonitors
SetTimer
GetWindowLongW
AdjustWindowRectEx
GetWindowRect
GetDC
SetWindowPos
DrawIcon
DestroyCursor
GetCursorInfo
GetMonitorInfoW
DestroyIcon
GetForegroundWindow
LoadIconW
SetWindowLongW
GetClientRect
DrawIconEx
ReleaseDC
GetCursorPos
DefWindowProcW
RedrawWindow
gdi32
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetTextExtentPointW
PlgBlt
CreateFontW
GetBitmapBits
GetPixel
DeleteDC
TextOutW
SetTextColor
SetBitmapBits
SetBkMode
DeleteObject
CreateSolidBrush
CreateBitmap
SetPixel
Polygon
ExtFloodFill
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ