NEAS[.]d0477b5fb89ae2d704f6d77a786df4e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d0477b5fb89ae2d704f6d77a786df4e0.exe
Size

5KB
MD5

d0477b5fb89ae2d704f6d77a786df4e0
SHA1

5c0f369e943c9973b7dd1e9f5681fc477d665231
SHA256

96868f1d149d9f02e88032f0c1e14cbc832e0ab80fac4e55fb07fa3112eedac3
SHA512

e26cc0ff3272ffa0ebd54d5aa683a8cd592fd94aa994a592e6eac7da13b7eef145f4a913772ee61e8f683c6491f0f7f7fdc58d8a9c1fb76ff44193dbe10833c1
SSDEEP

96:/tHmVXjb9nXJUsBR1Tvyk9XdddddddddnTrkQ3oCosor:5OXP51Tvyk9v1or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d0477b5fb89ae2d704f6d77a786df4e0.exe

Files

NEAS.d0477b5fb89ae2d704f6d77a786df4e0.exe
.exe windows:4 windows x64

13830944c2a30bda5b4e8d1e306f2a76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ