NEAS[.]1c7a7081096e281f69fa2812f9e53660_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c7a7081096e281f69fa2812f9e53660_JC.exe
Size

5KB
MD5

1c7a7081096e281f69fa2812f9e53660
SHA1

8bbeac9aa511bfe816fa99e59c909f2e6c4cc9b4
SHA256

c107f4f0ea94870f5b4260e929b1e7a13d0b7d5ad54663a4e40beda4d5b6b8ed
SHA512

6b475b800ee521cf117b16a1dfc19edda765d7a2a02ee90aab8f40085a31d4307a76fe9e4308fdd20f0b7cf7b2cc3331310d3536904a6ad07ca897ca076aeaaf
SSDEEP

96:NPtHFXoHZyPfnvkg31oO49cTrN40Aorp0:NJFX0MnT3CO49Dorp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c7a7081096e281f69fa2812f9e53660_JC.exe

Files

NEAS.1c7a7081096e281f69fa2812f9e53660_JC.exe
.exe windows:4 windows x64

4ec3f4529a88fc30e7f5bf3a38feff17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilMemReAlloc
SnmpUtilVarBindFree
SnmpUtilOidToA
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ