NEAS[.]5d540701a01b26aa57679d362eee5400[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5d540701a01b26aa57679d362eee5400.exe
Size

5KB
MD5

5d540701a01b26aa57679d362eee5400
SHA1

69177350338cfde6057e28d89722a8753266f799
SHA256

82bcd7cabbed0ffd37f1a6f38aeaddbfd8886f8731cb359f09602e58724bbb79
SHA512

666764d3b3bc8936e6f704d75d72922d9fbd4727fdb67c50940b904e3f40f602b4f0475311378e8b577b0818a70f928245f6394839e52ffdd8caacc8dd394b06
SSDEEP

48:6hjvtHxWXZR/40lYR+zADzuLhQxrONvTrg7iGdRdL9orw2HlL:svtHwXZJ40lYRM6O2xrO9Tr3qor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5d540701a01b26aa57679d362eee5400.exe

Files

NEAS.5d540701a01b26aa57679d362eee5400.exe
.exe windows:4 windows x64

e4c665f63d3b8e5f45f679e06b730e54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ