Static task
static1
General
-
Target
NEAS.28fd9d223eb9fe90ae42470bfaf86770_JC.exe
-
Size
110KB
-
MD5
28fd9d223eb9fe90ae42470bfaf86770
-
SHA1
41697b207a2a47e26963e0f5bc4d0d13f5a18303
-
SHA256
096ca0fd74986de7fc1ee75e5ec5e36f588e0898750709e7070ad75e3280eb6a
-
SHA512
69a2d9cc277109a8ef1ac8ebd2437091e22397ae16cd61653ae09f449192e9d1d4e3eb7e7cf5d6b8e4faf2ff66fb2fa3acccf784d24ec5d2fde7ad662ce73394
-
SSDEEP
3072:yHgqKHj6fgFi3vyl1rRVHNIn9nMXPQiJI:zqmufgFMwvVHNI9MXoiJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.28fd9d223eb9fe90ae42470bfaf86770_JC.exe
Files
-
NEAS.28fd9d223eb9fe90ae42470bfaf86770_JC.exe.sys windows:6 windows x86
cda4f8adcd7331c59cef69a70dde3901
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
memset
MmIsAddressValid
MmGetSystemRoutineAddress
PsGetVersion
memcpy
IoCreateSymbolicLink
IoCreateDevice
wcsncpy
wcsrchr
KeTickCount
KeBugCheckEx
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ