NEAS[.]02c4e02c550c1bb6ef9eff9e61e20e50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.02c4e02c550c1bb6ef9eff9e61e20e50_JC.exe
Size

5KB
MD5

02c4e02c550c1bb6ef9eff9e61e20e50
SHA1

458f9a613b62e7c11e75b065bae34a8842000473
SHA256

eafb2b0124d4d720c95ec19a7a6eb6ffa3cd39fee89e4cbb5244929a1b01c826
SHA512

d029cdd7632e1db2705e49ee7609385cf204dbfe9556c437ac65c0f76218baa3b6bd573b23185d0dedccc5cd413b1c8da87043e04c489fd00daa5fb482bf490b
SSDEEP

48:6xsgtHoWXfImPIZjvjy66eVpwkFzuVBIhMONIddoTrg7GARYTRYb9orw2K:uDtH9XA3jvRF1kOSOSddoTrB4eWorI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02c4e02c550c1bb6ef9eff9e61e20e50_JC.exe

Files

NEAS.02c4e02c550c1bb6ef9eff9e61e20e50_JC.exe
.exe windows:4 windows x64

33f0f6d1dc4bfebb36f75a8842c2363a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilPrintOid
SnmpUtilMemFree
SnmpUtilOidNCmp
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ