NEAS[.]7126ef4b2826f235bf7900f8e824b220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7126ef4b2826f235bf7900f8e824b220.exe
Size

5KB
MD5

7126ef4b2826f235bf7900f8e824b220
SHA1

936e71378f7ab21385e4856e4c14b8ab92acc1ce
SHA256

4e94892fbe1d3d325ea1eed12b477a649db29a4ac624c64b502e9e49be9ee3a8
SHA512

7bb2cd9376c92a67d165bd522522fe9a1aee2c46943461a2a4ee89723d8aa34fa68e81d217de7b083228a04c160f730d7a115562b3e4fa80d05108862d1c6082
SSDEEP

96:7tH9XTe83stiOSJLfzfOQ9cTr23T+T4or:99XiMsUOkfOQ9Jdor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7126ef4b2826f235bf7900f8e824b220.exe

Files

NEAS.7126ef4b2826f235bf7900f8e824b220.exe
.exe windows:4 windows x64

92973cbdfa7c14fffb71386d16627b0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ