Static task
static1
General
-
Target
NEAS.0520843b2bd4f2647758ebd098ee2b60.exe
-
Size
3KB
-
MD5
0520843b2bd4f2647758ebd098ee2b60
-
SHA1
c73d8b4e4c713b129618fb923ea33ae7750525c0
-
SHA256
c53430632561139543d98d80175fa945d708beef1b0ce8ff4496dd3007d26271
-
SHA512
5e6b0f07c22afdfbc64eefe815b9b86e3d605e6ed16e85af38e6db2679760de5b92c672d49300ed2636c0932bff2ebf99a851505653a70be2058f8021dab1a77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0520843b2bd4f2647758ebd098ee2b60.exe
Files
-
NEAS.0520843b2bd4f2647758ebd098ee2b60.exe.sys windows:5 windows x86
8e6deaf05e95b4c88599098c3f2bcf71
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ord35772
ord35784
ord35804
ord35830
ord35846
ord35870
ord35894
ord35924
ord35944
ord35960
ord35980
ord35998
ord36022
ord36044
ord36068
ord36086
ord36110
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ