NEAS[.]c60dddf4ab8a58ab9f88aeea8adde300[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c60dddf4ab8a58ab9f88aeea8adde300.exe
Size

5KB
MD5

c60dddf4ab8a58ab9f88aeea8adde300
SHA1

b631e4149f58b0bcf040179dd619816b9d3077a3
SHA256

1ecafa381b6d7abda2acf91f9e565bcd203e15126e90b58b3c6a737b4b4e96ee
SHA512

feb707330d51a54dab4f1c1cb7028b9494e8e4645e3da0017351afd3af9097eb37401eda4cc3e6c38bb5ec2336146539e09f0b87b07689fd9cb5d0378f71cda3
SSDEEP

96:RtHvdXbtGIxpVX1bnOmnddoTrpB36F6Lor:7vdXgspVFbnOmE1or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c60dddf4ab8a58ab9f88aeea8adde300.exe

Files

NEAS.c60dddf4ab8a58ab9f88aeea8adde300.exe
.exe windows:4 windows x64

36f00707499f779bcfff405308fe51e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilOidToA
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ