NEAS[.]025dc2d2a79ecb5820046d07d18e5b00_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.025dc2d2a79ecb5820046d07d18e5b00_JC.exe
Size

5KB
MD5

025dc2d2a79ecb5820046d07d18e5b00
SHA1

3dd172d2867020cad201838694bf71e3f35837a9
SHA256

3efbcbf42fb32974dcc060c4ac2085a04ed1165795f3f73347162391824f53ad
SHA512

f76aa0e40e6b4774e2ce3fc80a63d594d9a004aa8f251a05835793fcc222e94fa3160fa76552a8af87c3eb36db3aaab3f451f7caf23198af83dc8d1f17154a64
SSDEEP

48:6N7tHxWXZR/4pl8d+hxeXzu6fvQxrONvTrg7taYnGdVPdVd9orwoZknz:gtHwXZJ4plNcjrfYxrO9TrITnqor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.025dc2d2a79ecb5820046d07d18e5b00_JC.exe

Files

NEAS.025dc2d2a79ecb5820046d07d18e5b00_JC.exe
.exe windows:4 windows x64

f2c2c15f1cf8932cfe2a399b2363c5e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidFree
SnmpUtilMemFree
SnmpUtilOidToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ