NEAS[.]32dc3adb54c11f53096b1ba33d07bec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.32dc3adb54c11f53096b1ba33d07bec0.exe
Size

5KB
MD5

32dc3adb54c11f53096b1ba33d07bec0
SHA1

09368b1027f1cf944326e87cc2dd72db26466813
SHA256

6e3e90b9aa5c2cf4b282b8575dd4422e61cb2806dbb29a274d4e6e5322cb5f61
SHA512

b3f37af42d4ed354651a13bfe478cbd53b75b24fa31066f34d89df1e9666d033838357da5e77b7b6c40886250748b124d5959785bb3f249fa01990589f40ce5d
SSDEEP

48:6+TvtHhWXpBPIl6VSs6h5DVuTzuLhAs+VONLTrg7EYaGd1dn9orw2vz:ftHAXpnVSsG5DaOmfVOJTrLdaor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.32dc3adb54c11f53096b1ba33d07bec0.exe

Files

NEAS.32dc3adb54c11f53096b1ba33d07bec0.exe
.exe windows:4 windows x64

846d6f2fe9824a6efab787bcbf8a1620

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpSvcGetUptime
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ