NEAS[.]daa87eea8a49fbc8657a81571345dbe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.daa87eea8a49fbc8657a81571345dbe0.exe
Size

5KB
MD5

daa87eea8a49fbc8657a81571345dbe0
SHA1

3384fbbb509cd8afe19dea8052b1eb69c60420e6
SHA256

a953d163c4a9791c8d140e2ec02480589dc18f591949ddcd97247c30b3d38f5f
SHA512

5c129e68aeb5e7de5326f2faa1ac5581925d2bd8df24ffc96367d5d47d6329451dd6bfd2532a39aca311d61fa7eac3f77c5dbdf3d523544dfff155ceefe891bc
SSDEEP

48:698mtHhWXpBPoeas2hDBzu8x/IRBVtkNRTrg7DjKI8cKI8l9orw2kz:65tHAXpqfsKtrxwR7tknTrGKI1KI4or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.daa87eea8a49fbc8657a81571345dbe0.exe

Files

NEAS.daa87eea8a49fbc8657a81571345dbe0.exe
.exe windows:4 windows x64

a5bbd0313a7ab6c1ecf3aec950bc72c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidFree
SnmpUtilMemFree
SnmpUtilVarBindFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ