Static task
static1
Behavioral task
behavioral1
Sample
NEAS.49915f1930b22d4833814960dfab1150.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.49915f1930b22d4833814960dfab1150.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.49915f1930b22d4833814960dfab1150.exe
-
Size
148KB
-
MD5
49915f1930b22d4833814960dfab1150
-
SHA1
3727d97481c48102f5d776642bf43ae45d9cc2d5
-
SHA256
74cf5ade1e538cf5eb0dccf6a19998c481dba0638aff959fa7b65edf3061ac1e
-
SHA512
ee26542b1536520fe7054ce136e898bd4fce6d0fbfc08e9427d242f61a1f2ed4996802506bed222253437dc6dca4bc6ece7dd8fc72e2d6d10306a247062ec5b7
-
SSDEEP
3072:Ono5bDO6COR0W9N2WbOSspFqOzN+pjY6y59tzoI7h+aS1G1:OnoAOR0W9N9ylHEpKtzo0naG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.49915f1930b22d4833814960dfab1150.exe
Files
-
NEAS.49915f1930b22d4833814960dfab1150.exe.exe windows:5 windows x86
a2bfcc4ccaf36b84d6efe660527b25db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendStringA
timeGetTime
ddraw
DirectDrawCreate
dinput8
DirectInput8Create
kernel32
lstrlenA
SetCurrentDirectoryA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateFileA
SetFilePointer
FlushFileBuffers
GetStringTypeW
GetLocaleInfoA
GetProcessHeap
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
GetLastError
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
HeapAlloc
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
user32
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
UpdateWindow
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
DefWindowProcA
PostQuitMessage
DestroyWindow
GetClientRect
ClientToScreen
SetCursor
SendMessageA
SetWindowPos
LoadImageA
gdi32
DeleteObject
CreateCompatibleDC
SetPixel
GetObjectA
StretchBlt
DeleteDC
GetPixel
TextOutA
SetTextColor
SetBkMode
SelectObject
GetStockObject
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ