NEAS[.]e59717457aa9a6af620d4723ee8a8b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e59717457aa9a6af620d4723ee8a8b40.exe
Size

5KB
MD5

e59717457aa9a6af620d4723ee8a8b40
SHA1

ae0987166d16b62c72b38eb1b463ac90f3a2accf
SHA256

c222043c0a24c726d6222d8baeecb4a93384197bfa3311c86eaa7e2e79e24030
SHA512

4afe6d93eaad56caf8276e31b60541b879ed5d6774e21e6acd4838130a31d6c7c2206d225dcbef0a0bd2aa08a5256765034671fc7f6da7022b86a577ba52e1fa
SSDEEP

48:63sOtHPIWX4u8xmwgaCodWqxIzuEApQLON3pTrg7DYyART8RT09orwww:o9tHPdX4nmkzXiwpQLOnTrcH4Qcor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e59717457aa9a6af620d4723ee8a8b40.exe

Files

NEAS.e59717457aa9a6af620d4723ee8a8b40.exe
.exe windows:4 windows x64

ec40adf08a957ea5c917444ce0efae45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilOidNCmp
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ