Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8de9ef11c4762bc1e33de278b6873020.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8de9ef11c4762bc1e33de278b6873020.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.8de9ef11c4762bc1e33de278b6873020.exe
-
Size
108KB
-
MD5
8de9ef11c4762bc1e33de278b6873020
-
SHA1
c4ec2cd00a8e7180f72bc98d4d847e3d1378ee65
-
SHA256
37fa5769ab6d2be4aeb0d748603796eab3dc485031578e0dba5b0d7de668eaee
-
SHA512
540456bae880ee1b571c28538f36125d2fc4ff4c7c1f09b2eaf525ec2fc39c1b2184831efa3c383351c649b7e936f63b959c324b67481516173a4c9591136edb
-
SSDEEP
1536:dpPDnLtwKEWoVEBlgtpNNZrbCkfG4t/YeWroLzfWSiDUyqqPQ3I4VEAxOxwss8Lw:fY+Blgt/bCkfGTZ4VE9NL9l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8de9ef11c4762bc1e33de278b6873020.exe
Files
-
NEAS.8de9ef11c4762bc1e33de278b6873020.exe.exe windows:4 windows x86
bd339daf5398336a96a2df72beb45bef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glGenTextures
glTexParameteri
glTexEnvf
glSelectBuffer
glGetIntegerv
glInitNames
glPushName
glLoadName
glScalef
glCallList
glNewList
glEndList
glMatrixMode
glOrtho
glDepthMask
glViewport
glHint
glNormal3f
glVertex3d
glColor4ub
glPushMatrix
glLightfv
glRotatef
glLightModeli
glMaterialfv
glMaterialf
glVertex3f
glDisable
glTexCoord2f
glPopMatrix
glFlush
glLoadIdentity
glBindTexture
glTranslatef
glBegin
glTexCoord2d
glVertex2i
glEnd
wglDeleteContext
glEnable
glDepthFunc
glBlendFunc
glClear
glRenderMode
glColor3ub
wglCreateContext
wglMakeCurrent
glu32
gluPickMatrix
gluPerspective
gluBuild2DMipmaps
dsound
ord11
kernel32
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
WriteFile
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetModuleFileNameA
HeapFree
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
lstrlenA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
QueryPerformanceCounter
Sleep
LockResource
SizeofResource
LoadResource
FindResourceA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateFileW
UnmapViewOfFile
LocalFree
LocalAlloc
MapViewOfFile
CreateFileMappingA
ExitProcess
GetModuleHandleA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LoadLibraryA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
user32
CallWindowProcA
DefWindowProcA
PostQuitMessage
GetCursorPos
UpdateWindow
ShowWindow
ChangeDisplaySettingsA
CreateWindowExA
GetSystemMetrics
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetFocus
MessageBoxA
PostMessageA
GetWindowPlacement
ReleaseDC
ShowCursor
GetDC
wsprintfA
gdi32
DeleteObject
SetDIBits
SelectObject
ChoosePixelFormat
SetPixelFormat
SwapBuffers
GdiFlush
DeleteDC
CreateCompatibleDC
CreateDIBSection
ole32
CoCreateInstance
CoInitialize
CoUninitialize
winmm
mmioRead
mmioCreateChunk
mmioSeek
mmioSetInfo
timeGetTime
mmioClose
mmioOpenA
mmioAscend
mmioGetInfo
mmioDescend
mmioWrite
mmioAdvance
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE