NEAS[.]0d4621f736036f97c1701f62ed454aa0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0d4621f736036f97c1701f62ed454aa0_JC.exe
Size

5KB
MD5

0d4621f736036f97c1701f62ed454aa0
SHA1

1e0fc3ef5ae5845a6a5bc1d9196d58766bde617b
SHA256

8a1425ba7ccde9193cedbb74054409c6f7d7cbe735d319a3d5b9313423fa6ffa
SHA512

f80e8ccaf97d3026892f753778001e2278c81382c782dd61ce81fe618170712cd99affd301170674946990f70a518909d9489dea5a2e51765eeb2efb65a70d03
SSDEEP

96:ttHlXLD2PhFnm83MFqwDNvXO2pvTr2bR3oWoQor:PlXgFnm832RvXO4Q1or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0d4621f736036f97c1701f62ed454aa0_JC.exe

Files

NEAS.0d4621f736036f97c1701f62ed454aa0_JC.exe
.exe windows:4 windows x64

7fcfcdad5c9f54da0d8d4b384a51cdd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ