NEAS[.]6ae2efba12b33360551e161011016750[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6ae2efba12b33360551e161011016750.exe
Size

5KB
MD5

6ae2efba12b33360551e161011016750
SHA1

89984c3a036bd28c0914f8674e0e246b1011be0b
SHA256

162c234d9c1b3f51e75f9804135809228faf1d02190c78f63f983a8a67c48a39
SHA512

62a4a1ec1a9102dcfa48fc4476e17ad61621713b6f5ade6d9f9974f79950699d52c4e94caec20b4a04120d7c47d9b7f11cd924dab442fd7eb02f26f7bbc5996f
SSDEEP

96:GtHNXQSOtJTy89Ef/p95LfjOO7UTrGz3o7oJorC:wNXTOJW89EHfZOOz9orC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6ae2efba12b33360551e161011016750.exe

Files

NEAS.6ae2efba12b33360551e161011016750.exe
.exe windows:4 windows x64

f456e1bbafdea8fe49bd07db6dc3f31b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ