NEAS[.]df5a39a3ad09330360ae8998fcdd3ca0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.df5a39a3ad09330360ae8998fcdd3ca0.exe
Size

5KB
MD5

df5a39a3ad09330360ae8998fcdd3ca0
SHA1

5afb122c2e88dbba6e975df1fb583bab93a27572
SHA256

f75a30c1a8579505e799eda071229a1ccb34078b8c09be85289502c3803a5875
SHA512

9fd4033ce915da560801160a0dff66a6a115db2b131f3d344eff68f1a32631dcaf8d753b4533c091a4a4a40fd8be83885db6b212f6bc1340a0d723999e8a622f
SSDEEP

96:uttHAXAsvsNdLm4OOMTraM24nrnLorT3:uPAXt6NOO+or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df5a39a3ad09330360ae8998fcdd3ca0.exe

Files

NEAS.df5a39a3ad09330360ae8998fcdd3ca0.exe
.exe windows:4 windows x64

68ff88adc087ec436ab1f3966317c4fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilPrintAsnAny
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ