NEAS[.]3dbd7702d4fa904e8d4ac2a41c89fdb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3dbd7702d4fa904e8d4ac2a41c89fdb0.exe
Size

2KB
MD5

3dbd7702d4fa904e8d4ac2a41c89fdb0
SHA1

27b56e6342a4f0b5e13719c50742e6afa7a79fff
SHA256

3b9daa66e8e6a523f425bc32adefcdd6e8487e7142f8c75b8618bd7c93d0dc96
SHA512

ffab5549340913f7df0d2e45c9a91a64c9598676a875960ae95b514833b2abc33c94b21ada2eca47236d908a3a1148d4e47c467263c90321a78a2955e36a40ab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3dbd7702d4fa904e8d4ac2a41c89fdb0.exe

Files

NEAS.3dbd7702d4fa904e8d4ac2a41c89fdb0.exe
.sys windows:5 windows x86

4f6fce77fc0fa63292dc1c24f0b3b3ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ord47388
ord47406
ord47430
ord47458
ord47486
ord47510
ord47534
ord47558
ord47576

Sections

.text
Size: 640B - Virtual size: 543B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 372B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ