NEAS[.]a0a8742c0761b9161deecc1e3792b5d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a0a8742c0761b9161deecc1e3792b5d0.exe
Size

5KB
MD5

a0a8742c0761b9161deecc1e3792b5d0
SHA1

b6d8810fcb3e564577b6e7cd8837bf0559ebfcdd
SHA256

d5747f7c9c232a9062ea09eaedb5c27af5502a19d999426272e9f0813c33e068
SHA512

527414f7f251ec7d95fd447f3add2b195e7c6866defe598c2f6c6489e4900c6c5bffa6c6c9bc4d2a3a8fd1476f11e765b46d0244fbe48166ea5a6d6f55d4aeeb
SSDEEP

96:QStHFXoHZ9PfnJcDk231oO49cTrg4eWor90:QkFX0znm93CO49Wor90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0a8742c0761b9161deecc1e3792b5d0.exe

Files

NEAS.a0a8742c0761b9161deecc1e3792b5d0.exe
.exe windows:4 windows x64

f21d370e80f2fd50a5836cdb8cc6d0ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilMemReAlloc
SnmpUtilOidNCmp
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ