NEAS[.]0c77bf3e38217b64d578217bfb0cf670_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c77bf3e38217b64d578217bfb0cf670_JC.exe
Size

5KB
MD5

0c77bf3e38217b64d578217bfb0cf670
SHA1

6d6361d8ac0f45f65746500d8c43ed21099cd3f8
SHA256

0a7dddf3f4ae12250b16f0c1f431afbf1df362c053472afb3389f13cbb41e463
SHA512

a4e9a413d92519284da9fc1e86a762bb184feb1b8bb692522d300992c25790f5e9f194beb9bb4667542244625ffb98085b157f55c3de4e35cd972c5e7fe56ddc
SSDEEP

48:6VjvtHxWXZR/40l8aHzADzuLhQxrONvTrg7a2GdVQdVw9orwTL:AvtHwXZJ40lX6O2xrO9Tr4qor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c77bf3e38217b64d578217bfb0cf670_JC.exe

Files

NEAS.0c77bf3e38217b64d578217bfb0cf670_JC.exe
.exe windows:4 windows x64

6a4a0c0db11b36e4f2507ecd8c7d0d75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ