Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f158e39a1f3e3c1aaf2e27539f2df240.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.f158e39a1f3e3c1aaf2e27539f2df240.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f158e39a1f3e3c1aaf2e27539f2df240.exe
-
Size
80KB
-
MD5
f158e39a1f3e3c1aaf2e27539f2df240
-
SHA1
56a23af7a05477818e05d892915afe1855d45159
-
SHA256
c8540b7207937471a2ce8f816c0586ac7db2c7351c68c337cbac5870936fcca8
-
SHA512
049f9b4063ed6e4ce96648136d5782f90c94056dd6c600afc2d909d7ce21efa0405306f034ba99c882d85d13aadb9ce6873e9cda2e078c62314f6526bed9db1d
-
SSDEEP
1536:X7KTNnXasOdm3rNzkY/UHCmCuXLHbJbUipGv9vxRMJRwY9/4DQBsv/D:rKTNnXjOdm3r9K/LxyWJp1O3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f158e39a1f3e3c1aaf2e27539f2df240.exe
Files
-
NEAS.f158e39a1f3e3c1aaf2e27539f2df240.exe.exe windows:4 windows x86
90e2fc258517a1837a7312c0419f2591
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glColor3f
glTexEnvf
glTexParameteri
glPixelStorei
glBindTexture
glDrawElements
glDisable
glEnable
glNormalPointer
glVertexPointer
glTexCoordPointer
glColorPointer
glEnableClientState
glGenTextures
glFrustum
glLoadIdentity
glMatrixMode
glViewport
glCullFace
glDepthFunc
glClearDepth
wglCreateContext
wglMakeCurrent
wglDeleteContext
glClear
glTexImage2D
glTranslatef
glRotatef
glScalef
glShadeModel
glClearColor
kernel32
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
HeapSize
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
RaiseException
FlushFileBuffers
SetStdHandle
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
WriteFile
CloseHandle
ReadFile
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
GetLastError
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetLocaleInfoA
VirtualProtect
GetEnvironmentStringsW
HeapFree
GetSystemInfo
HeapAlloc
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
user32
UnregisterClassA
DestroyWindow
ReleaseDC
MessageBoxA
ShowCursor
ChangeDisplaySettingsA
DefWindowProcA
PostQuitMessage
SetFocus
SetForegroundWindow
ShowWindow
GetDC
CreateWindowExA
AdjustWindowRectEx
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
PeekMessageA
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE