NEAS[.]66a12cfde11355dff55321740f006490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.66a12cfde11355dff55321740f006490.exe
Size

5KB
MD5

66a12cfde11355dff55321740f006490
SHA1

de28f7fcb38549f261ec63c559126f6827a43933
SHA256

665c742c3f4492d416fd9ab3df1137775514cc95cb6260c792ca8611b467c90b
SHA512

00295de26e92c303886922c5ac69c221396e24aaa2a93a36a531d891ed8d6dd3c71e9910bf721fa2e2138f8bb1969092041606988bcbd8a6300c22897a774688
SSDEEP

96:WtHNXQSVE9QciRf01vrdzTRdODddmTri2iiSor:ANXTNcyf0rTRdODH2iiSor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.66a12cfde11355dff55321740f006490.exe

Files

NEAS.66a12cfde11355dff55321740f006490.exe
.exe windows:4 windows x64

6639c288d843da46dd480a84d56ba314

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpUtilVarBindFree
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ