NEAS[.]3ff7fa070bffe2edd313d09d9fdf8170[.]exe | Triage

Sharing

General

Target

NEAS.3ff7fa070bffe2edd313d09d9fdf8170.exe
Size

5KB
MD5

3ff7fa070bffe2edd313d09d9fdf8170
SHA1

dfc1d06a9aed5389accaaaa186849bf8988e9879
SHA256

2947363c8baa801bac4461cbe127c401edfb22543f7e03139d20b614fa0b201a
SHA512

8b7649934d8795fc86a25588b59000b3d6b500dab4ddf151428812d33cd038c59135889f2cf8c893559cbe5cd627e2e0f5a06bcf67f7108fa7ee01be5c0a6426
SSDEEP

96:TtHtXPIS9MZz0j6EYfrzCdOjJ99oTrP2iDsDwor:FtXozgaCdOd99c2iQEor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ff7fa070bffe2edd313d09d9fdf8170.exe

Files

NEAS.3ff7fa070bffe2edd313d09d9fdf8170.exe
.exe windows:4 windows x64

c54530f7cc10fc85b2a03a284aa10fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilVarBindCpy
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemReAlloc
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ