Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a62995c9e0959650082bbbf4dea41b60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a62995c9e0959650082bbbf4dea41b60.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.a62995c9e0959650082bbbf4dea41b60.exe
-
Size
112KB
-
MD5
a62995c9e0959650082bbbf4dea41b60
-
SHA1
4feeef3d573364065376875e2d3449556726e566
-
SHA256
d1ed535a953cc0eda715210b65e58c1e48f32c60f2d6e13cdd273b3f14939de6
-
SHA512
ec794bc52cc3601dcefff64113dcd17340354d0a9e7b2f44762956af1482e10f3debb13af8977ecf8cf92f60ac7ef526fc5823f9a51fe9931bbd6bdc87ab3d58
-
SSDEEP
1536:NIsrBcpwRzUkxGWctvI7M/YbTy0mCyDsi0aqK8G7cH5aAAEop4faxvaASeBu4l:NQ+qkxGWORZDBAAEY41eBFl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a62995c9e0959650082bbbf4dea41b60.exe
Files
-
NEAS.a62995c9e0959650082bbbf4dea41b60.exe.exe windows:4 windows x86
434c8ed6a0c1fb701c7f72d4dc198978
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glGenTextures
glTexParameteri
glTexEnvf
glSelectBuffer
glGetIntegerv
glInitNames
glPushName
glLoadName
glScalef
glCallList
glNewList
glEndList
glMatrixMode
glOrtho
glDepthMask
glViewport
glHint
glVertex3d
glColor4ub
glPushMatrix
glLightfv
glRotatef
glVertex3f
glMaterialfv
glMaterialf
glLightModeli
glDisable
glTexCoord2f
glPopMatrix
glFlush
glLoadIdentity
glBindTexture
glTranslatef
glNormal3f
glBegin
glTexCoord2d
glVertex2i
glEnd
wglDeleteContext
glEnable
glDepthFunc
glBlendFunc
glClear
glRenderMode
glColor3ub
wglCreateContext
wglMakeCurrent
glu32
gluPickMatrix
gluPerspective
gluBuild2DMipmaps
dsound
ord11
kernel32
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
WriteFile
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetModuleFileNameA
HeapFree
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
lstrlenA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
QueryPerformanceCounter
Sleep
LockResource
SizeofResource
LoadResource
FindResourceA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
CreateFileW
UnmapViewOfFile
LocalFree
LocalAlloc
MapViewOfFile
CreateFileMappingA
ExitProcess
GetModuleHandleA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LoadLibraryA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
user32
CallWindowProcA
DefWindowProcA
PostQuitMessage
GetCursorPos
UpdateWindow
ShowWindow
GetSystemMetrics
CreateWindowExA
ChangeDisplaySettingsA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetFocus
MessageBoxA
PostMessageA
GetWindowPlacement
ReleaseDC
ShowCursor
GetDC
wsprintfA
gdi32
DeleteObject
SetDIBits
SelectObject
ChoosePixelFormat
SetPixelFormat
SwapBuffers
GdiFlush
DeleteDC
CreateCompatibleDC
CreateDIBSection
ole32
CoCreateInstance
CoInitialize
CoUninitialize
winmm
mmioRead
mmioCreateChunk
mmioSeek
mmioSetInfo
timeGetTime
mmioClose
mmioOpenA
mmioAscend
mmioGetInfo
mmioDescend
mmioWrite
mmioAdvance
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE