NEAS[.]fe0c0e5278fbf6b089eee8d010432040[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fe0c0e5278fbf6b089eee8d010432040.exe
Size

5KB
MD5

fe0c0e5278fbf6b089eee8d010432040
SHA1

10543cbedc2185e443e3551485bf485c4131803c
SHA256

ea5c0cf3562f210cbcb6ec11171f20b3e4939826fd07e1b41f9acbee2ea25f3d
SHA512

633dd31744478c0c765dade86305c00f97ed4af510de7cd96b26a2a7e63d2e5ef00bde29caa799ce68c356fd4ac276ecd116d40ebc3559a37107bcca6799d436
SSDEEP

48:6b8y3tHJWXxZLV2u9QsKzuLwm4aNBTrg7QjKIFKI09orw6kcee:4R3tHYXxzR9QBdm4a3TrXKIFKIIor2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fe0c0e5278fbf6b089eee8d010432040.exe

Files

NEAS.fe0c0e5278fbf6b089eee8d010432040.exe
.exe windows:4 windows x64

e7ee22c0ba6343d5856035de2a0a9db4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpUtilVarBindFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ