NEAS[.]eccab2bf8d544f3205742f20c9c5d1c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eccab2bf8d544f3205742f20c9c5d1c0.exe
Size

5KB
MD5

eccab2bf8d544f3205742f20c9c5d1c0
SHA1

9b6f848d5e2abd2499f76e1e8044d617793c4c30
SHA256

b4c5769921a0def5bab5287c5bd6b06a958e958e180111c32bf8435e2720bbe1
SHA512

0096fce1a4f6b6325826b199feb79e3a2287ace14d07a8739f0dbda951f7b13e3540496e901877e5e547eb8eac8c7c937936ce2564bb63d579e0c7fd5e6d564e
SSDEEP

96:xtHPdX4DxmdkocC29S17uOT99oTrzQ3kOor:bVXGckbC29k7uOT99rVor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eccab2bf8d544f3205742f20c9c5d1c0.exe

Files

NEAS.eccab2bf8d544f3205742f20c9c5d1c0.exe
.exe windows:4 windows x64

aa7ee63793b78434c46407d0f3facaa9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilIdsToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ