NEAS[.]2d903d942a84bc191018788968215a80[.]exe | Triage

Sharing

General

Target

NEAS.2d903d942a84bc191018788968215a80.exe
Size

40KB
MD5

2d903d942a84bc191018788968215a80
SHA1

db1c6b8e2108a18dde12f112dce05828afee544e
SHA256

e7366a36e0affd755547cefd76357f772d5479881fa6f31ce537a8b3b220e9b4
SHA512

5dc8a6e784857154c0f6d9bf8522935c831beb665ce98191b02b43cca23cf69ebb71c9e9fc54884fc88aaff69b346951acd3ab370e369cc212750ca10b69f399
SSDEEP

192:Dlmt5zD7hSmUc91dCgD7Q26JeR5zzqXUqPNwI8UtDoYxz9Kg:Mznh7CgD7Q26JPXUqVjoCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d903d942a84bc191018788968215a80.exe

Files

NEAS.2d903d942a84bc191018788968215a80.exe
.dll windows:5 windows x86

328052666d9386168743c1ed1bed5bae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

DbgPrintEx
RtlAssert

videoprt.sys

VideoPortGetAccessRanges
VideoPortInitialize
VideoPortMapMemory
VideoPortUnmapMemory
VideoPortZeroMemory

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rossym
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ