Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4a8a0133f8fce3879e728c28aa32fbb0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.4a8a0133f8fce3879e728c28aa32fbb0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.4a8a0133f8fce3879e728c28aa32fbb0.exe
-
Size
1.6MB
-
MD5
4a8a0133f8fce3879e728c28aa32fbb0
-
SHA1
9498dadf8f29cc750ea85f43d84d6eb4687e4616
-
SHA256
4b7a98e61893d6c1f51608568e99e3d9dc051f0054ba29abfc414276c7476f0c
-
SHA512
dc3fc313d9ab0de9ef816be3265eb91479ad3316d6e51d87f0666bd54eca12696a6d14fe1b5354e3c6479b3b6a4a6787725921092536b6cd6878df5a35de4403
-
SSDEEP
49152:w42PFxVLpAeBOn69HD3CJec/fHVEyDoHXKpTXznEBlDQC38zivs/:w42PrV7kf1EEo3KlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4a8a0133f8fce3879e728c28aa32fbb0.exe
Files
-
NEAS.4a8a0133f8fce3879e728c28aa32fbb0.exe.exe windows:4 windows x86
385de2a0aaed2597565c2710457975a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
waveInGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetNumDevs
wsock32
send
gethostbyname
closesocket
socket
bind
recv
WSACleanup
setsockopt
htons
WSAGetLastError
ioctlsocket
ntohl
recvfrom
WSAStartup
connect
gethostname
inet_ntoa
sendto
mss32
_AIL_set_preference@8
_AIL_stream_volume_levels@12
_AIL_set_sample_ms_position@8
_AIL_end_sample@4
_AIL_enumerate_3D_providers@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_3D_position@16
_AIL_allocate_3D_sample_handle@4
_AIL_set_3D_sample_offset@8
_AIL_open_stream@12
_AIL_set_3D_sample_playback_rate@8
_AIL_end_3D_sample@4
_AIL_set_3D_sample_volume@8
_AIL_stop_3D_sample@4
_AIL_set_stream_ms_position@8
_AIL_open_3D_provider@4
_AIL_resume_3D_sample@4
_AIL_3D_position@16
_AIL_stream_status@4
_AIL_sample_playback_rate@4
_AIL_load_sample_buffer@16
_AIL_set_sample_volume_levels@12
_AIL_sample_volume_pan@12
_AIL_minimum_sample_buffer_size@12
_AIL_sample_ms_position@12
_AIL_release_sample_handle@4
_AIL_set_DirectSound_HWND@8
_AIL_3D_sample_length@4
_AIL_set_redist_directory@4
_AIL_sample_buffer_ready@4
_AIL_3D_sample_playback_rate@4
_AIL_close_3D_provider@4
_AIL_stream_playback_rate@4
_AIL_set_stream_volume_levels@12
_AIL_set_3D_rolloff_factor@8
_AIL_set_file_callbacks@16
_AIL_stream_volume_pan@12
_AIL_set_sample_type@12
_AIL_last_error@0
_AIL_set_3D_distance_factor@8
_AIL_3D_sample_volume@4
_AIL_pause_stream@8
_AIL_set_sample_address@12
_AIL_set_3D_sample_info@8
_AIL_process_digital_audio@24
_AIL_WAV_info@8
_AIL_set_stream_loop_count@8
_AIL_set_sample_playback_rate@8
_AIL_set_3D_room_type@8
_AIL_stream_ms_position@12
_AIL_stop_sample@4
_AIL_init_sample@4
_AIL_stream_info@20
_AIL_sample_volume_levels@12
_AIL_allocate_sample_handle@4
_AIL_3D_sample_status@4
_AIL_resume_sample@4
_AIL_set_sample_reverb_levels@12
_AIL_3D_sample_offset@4
_AIL_shutdown@0
_AIL_close_stream@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_stream_playback_rate@8
_AIL_3D_provider_attribute@12
_AIL_sample_status@4
_AIL_set_digital_master_reverb_levels@12
_AIL_size_processed_digital_audio@16
_AIL_set_stream_reverb_levels@12
_AIL_set_3D_sample_distances@12
_AIL_open_digital_driver@16
_AIL_startup@0
_AIL_digital_CPU_percent@4
_AIL_set_3D_sample_effects_level@8
_AIL_set_digital_master_room_type@8
_AIL_sample_position@4
_AIL_set_sample_loop_count@8
d3d9
Direct3DCreate9
dsound
ord11
ord6
kernel32
VirtualProtect
RaiseException
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetTimeZoneInformation
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
HeapCreate
HeapDestroy
SetFilePointer
FatalAppExitA
DeleteCriticalSection
SetConsoleCtrlHandler
LCMapStringW
GetSystemInfo
WideCharToMultiByte
LCMapStringA
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
SetEnvironmentVariableA
TlsAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
ExitProcess
GetFullPathNameA
RemoveDirectoryA
CreateDirectoryA
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
InitializeCriticalSection
SetStdHandle
GetTickCount
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableW
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
CompareStringA
MultiByteToWideChar
CompareStringW
GetCurrentProcess
SetPriorityClass
MulDiv
IsBadCodePtr
GetCurrentProcessId
CloseHandle
GetVersionExA
Module32Next
CreateToolhelp32Snapshot
GetCurrentDirectoryA
GetModuleFileNameA
LoadLibraryA
GetLastError
Module32First
GlobalUnlock
ReadFile
CreateProcessA
GlobalAlloc
OpenProcess
GetDriveTypeA
IsBadReadPtr
SetLastError
DeleteFileA
GetCurrentThreadId
GetFileAttributesA
SetFileAttributesA
VirtualFree
VirtualAlloc
GlobalMemoryStatus
QueryPerformanceCounter
Sleep
GetProcAddress
GetModuleHandleA
QueryPerformanceFrequency
CreateFileA
SetErrorMode
FreeLibrary
GlobalSize
GlobalLock
SetThreadExecutionState
FormatMessageA
WriteFile
user32
RegisterWindowMessageA
GetMonitorInfoA
MapVirtualKeyA
MonitorFromWindow
MoveWindow
PostQuitMessage
SetWindowTextA
CloseWindow
CallWindowProcA
DestroyWindow
SendMessageA
CreateWindowExA
DefWindowProcA
SetWindowPos
GetSystemMetrics
LoadImageA
UpdateWindow
AdjustWindowRect
EnumThreadWindows
ChangeDisplaySettingsA
GetDesktopWindow
ReleaseDC
GetWindowLongA
SetWindowLongA
GetWindowTextA
GetDC
MessageBoxA
ReleaseCapture
PostMessageA
GetCursorPos
SetCursorPos
GetForegroundWindow
ShowCursor
SetFocus
SetForegroundWindow
SetCapture
GetWindowRect
LoadCursorA
SetClipboardData
OpenClipboard
DispatchMessageA
ShowWindow
EmptyClipboard
PeekMessageA
GetClipboardData
TranslateMessage
LoadIconA
RegisterClassExA
CloseClipboard
GetMessageA
RegisterClassA
gdi32
SetDeviceGammaRamp
GetDeviceCaps
CreateFontA
CreateSolidBrush
advapi32
RegCreateKeyA
GetUserNameA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 18.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ