NEAS[.]253961f60d02ac693f4386de36e330a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.253961f60d02ac693f4386de36e330a0.exe
Size

5KB
MD5

253961f60d02ac693f4386de36e330a0
SHA1

8467ee0c34589f01b85d031ba9ee4ef5898ec3a6
SHA256

a4e0c18093df65a98be3168de218ccf02d051c43f71d9cee5bd00e618cf06df9
SHA512

8fd430e1f3f3dc32d03cef045b69106e1ec0a265ac090b047c43986842c29da34b9abe4e88bdf1b9e06ae491510b9a5aeca27144c1307033c1376cbc86cb6e3c
SSDEEP

48:6tZwJtHYWXQWfnctJcWUqrMkOC/MkzuO/bOONpUTrg7g3Y+317t17x9orw2YWY0:XtHNXQSctJcHqtL1TOO7UTrJx3Dxor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.253961f60d02ac693f4386de36e330a0.exe

Files

NEAS.253961f60d02ac693f4386de36e330a0.exe
.exe windows:4 windows x64

e9ca146281c20d95c8d4f6a89024621b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ