NEAS[.]f2a5f2b748f71d28950eb43c667ab600[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f2a5f2b748f71d28950eb43c667ab600.exe
Size

5KB
MD5

f2a5f2b748f71d28950eb43c667ab600
SHA1

6f9258c743119d2914954662dae9ee6e1de6636e
SHA256

bb1533f8441c715f521a28199565661a9139fd69578240396ea0781dadc733e8
SHA512

26e45879cbe428f6dc719dfbe8b86fe230936e221356f8cff339845e41d6b784134cfccafff39c2301ede15e854573be4f533e29da2752fd7ed92040d2aa0561
SSDEEP

48:6dumtHJWXxZwd2Di9BWrDzu4WYuAaN9ITrg7JY1KI8KIF9orw1:6btHYXxGdUi9BuvbuAafITrUI7873or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f2a5f2b748f71d28950eb43c667ab600.exe

Files

NEAS.f2a5f2b748f71d28950eb43c667ab600.exe
.exe windows:4 windows x64

e36863483d14c5dd251aafd9b4a2e263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilVarBindCpy
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ