Static task
static1
Behavioral task
behavioral1
Sample
fakenesw.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
fakenesw.exe
Resource
win10v2004-20231020-en
General
-
Target
fakenesw.exe
-
Size
1.6MB
-
MD5
3c4f32cb87ec74d1d13174f25b286bc3
-
SHA1
4a3da96d1816ca9701026927d78991f1f92281ff
-
SHA256
55db9730008a7a1effdbcfcdf55549f4a358d5759d8b84f4b857e6c052edb9d0
-
SHA512
31bd7c3d604ac5bfdec910696d3e69ec1b06c0a6fb6dcffe11b279bf16225fa00662d7f63eaeaa4d1d2b1f30571cba992604850165945859261521b69d19ec75
-
SSDEEP
24576:ihO4tYJfNFk/XF20ARrAWRzWsEKunyY+ATtyvz:i7tYJfNFqF20ARrRze2vz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fakenesw.exe
Files
-
fakenesw.exe.exe windows:4 windows x86
3689cacef6e36610eb87d5c170f8ad16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
openal32
alGenBuffers
alGenSources
alBufferData
alGetError
alDeleteBuffers
alGetSourcei
alDeleteSources
alSourcePlay
alSourceQueueBuffers
alSourceStop
alSourceUnqueueBuffers
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetError
alcMakeContextCurrent
alcOpenDevice
alleg42
_WinMain
__linear_vtable15
__linear_vtable16
__linear_vtable24
__linear_vtable32
__linear_vtable8
_construct_datafile
_current_palette
_drawing_mode
_gfx_driver_list
_gui_button_proc
_gui_ctext_proc
_gui_shadow_box_proc
_install_allegro_version_check
_make_bitmap
_mouse_on
_palette_expansion_table
_refresh_rate_request
_rgb_a_shift_32
_rgb_b_shift_15
_rgb_b_shift_16
_rgb_b_shift_24
_rgb_b_shift_32
_rgb_g_shift_15
_rgb_g_shift_16
_rgb_g_shift_24
_rgb_g_shift_32
_rgb_r_shift_15
_rgb_r_shift_16
_rgb_r_shift_24
_rgb_r_shift_32
_rgb_scale_5
_rgb_scale_6
_screen_vtable
_set_current_refresh_rate
_soft_arc
_soft_circle
_soft_circlefill
_soft_ellipse
_soft_ellipsefill
_soft_floodfill
_soft_polygon
_soft_polygon3d
_soft_polygon3d_f
_soft_quad3d
_soft_quad3d_f
_soft_rect
_soft_spline
_soft_triangle3d
_soft_triangle3d_f
_textmode
active_dialog
allegro_error
allegro_message
append_filename
blit
broadcast_dialog_message
calibrate_joystick
calibrate_joystick_name
canonicalize_filename
centre_dialog
clear_bitmap
clear_keybuf
color_map
create_bitmap
create_bitmap_ex
create_blender_table
create_sub_bitmap
create_video_bitmap
d_button_proc
d_check_proc
d_edit_proc
d_list_proc
d_menu_proc
d_radio_proc
d_shadow_box_proc
d_slider_proc
d_textbox_proc
d_yield_proc
destroy_bitmap
destroy_font
digi_driver
do_line
drawing_mode
empty_string
exists
fade_out
file_exists
file_size
flush_config_file
font
for_each_file_ex
free_audio_stream_buffer
get_audio_stream_buffer
get_config_float
get_config_hex
get_config_id
get_config_int
get_config_string
get_config_text
get_executable_name
get_extension
get_filename
get_mixer_bits
get_mixer_frequency
get_mouse_mickeys
geta_depth
getb
getb_depth
getg
getg_depth
getr
getr_depth
gfx_capabilities
gfx_driver
gui_bg_color
gui_fg_color
gui_get_screen
gui_menu_draw_menu
gui_menu_draw_menu_item
gui_mg_color
gui_mouse_b
gui_set_screen
gui_strlen
gui_textout_ex
init_dialog
install_int_ex
install_joystick
install_keyboard
install_mouse
install_sound
install_timer
is_relative_filename
joy
key
keyboard_needs_poll
keypressed
load_font
load_joystick_data
makeacol_depth
makecol
makecol_depth
masked_blit
mouse_b
mouse_needs_poll
mouse_sprite
mouse_x
mouse_x_focus
mouse_y
mouse_y_focus
mouse_z
object_message
offer_focus
pack_fclose
pack_fclose_chunk
pack_feof
pack_fopen
pack_fopen_chunk
pack_fopen_vtable
pack_fread
pack_fseek
pack_fwrite
pack_getc
pack_igetl
pack_igetw
pack_iputl
pack_iputw
pack_mgetw
pack_putc
palette_color
play_audio_stream
play_sample
poll_joystick
poll_keyboard
poll_mouse
pop_config_state
position_dialog
position_mouse
push_config_state
put_backslash
remove_display_switch_callback
remove_int
remove_joystick
remove_keyboard
remove_mouse
remove_sound
replace_extension
replace_filename
rest
save_bitmap
save_joystick_data
scare_mouse
screen
set_clip_rect
set_color_conversion
set_color_depth
set_config_file
set_config_float
set_config_hex
set_config_id
set_config_int
set_config_string
set_dialog_color
set_display_switch_callback
set_display_switch_mode
set_gfx_mode
set_mixer_quality
set_mouse_sprite
set_mouse_sprite_focus
set_palette
set_trans_blender
set_volume
set_volume_per_voice
show_mouse
shutdown_dialog
solid_mode
stop_audio_stream
stretch_blit
system_driver
text_height
text_length
textout_centre_ex
textout_ex
textprintf_centre_ex
textprintf_ex
uatof
ugetc
uinsert
unscare_mouse
update_dialog
ureadkey
uremove
usetc
ustrcmp
ustricmp
ustrlen
ustrncmp
ustrnicmp
ustrsize
ustrsizez
ustrstr
ustrtok
ustrtok_r
ustrzcat
ustrzcpy
ustrzncat
ustrzncpy
uszprintf
uvszprintf
uwidth
uwidth_max
voice_start
voice_stop
vsync
win_get_window
win_grab_input
win_set_window
xor_mode
gdi32
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
glu32
gluBuild2DMipmaps
gluGetString
gluOrtho2D
kernel32
AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
FormatMessageA
GetAtomNameA
GetCommandLineA
GetLastError
GetLogicalDrives
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
LocalFree
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_flsbuf
_iob
_onexit
_setmode
abort
asctime
atexit
atof
atoi
exit
fclose
fflush
floor
fopen
fputs
fread
free
fseek
ftell
fwrite
localtime
malloc
memcpy
memmove
memset
pow
printf
qsort
realloc
remove
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncat
strncpy
strstr
strtok
time
toupper
opengl32
glAlphaFunc
glBegin
glBindTexture
glBitmap
glBlendFunc
glClear
glClearColor
glColor3ub
glColor4f
glColor4fv
glColor4ub
glColor4ubv
glCopyPixels
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDrawPixels
glEnable
glEnd
glGenTextures
glGetDoublev
glGetError
glGetFloatv
glGetIntegerv
glGetString
glGetTexLevelParameteriv
glHint
glLoadIdentity
glLoadMatrixd
glLogicOp
glMatrixMode
glPixelMapfv
glPixelStorei
glPixelTransferi
glPixelZoom
glPointSize
glPopAttrib
glPopMatrix
glPushAttrib
glPushMatrix
glRasterPos2f
glRasterPos2i
glReadBuffer
glReadPixels
glRecti
glRotated
glScaled
glScissor
glTexCoord2f
glTexCoord2i
glTexEnvf
glTexEnvi
glTexImage2D
glTexParameteri
glTexSubImage2D
glTranslated
glTranslatef
glVertex2f
glVertex2i
glVertex3f
glViewport
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
user32
AdjustWindowRectEx
ChangeDisplaySettingsA
CreateWindowExA
DefWindowProcA
DestroyWindow
EnumDisplaySettingsA
GetDC
GetForegroundWindow
GetWindowLongA
LoadCursorA
LoadIconA
RegisterClassA
ReleaseDC
SetForegroundWindow
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
UnregisterClassA
UpdateWindow
zlib1
compress2
crc32
gzclose
gzopen
gzread
inflate
inflateEnd
inflateInit2_
uncompress
Sections
.text Size: 835KB - Virtual size: 834KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 399KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE