NEAS[.]8ffb223b0d91a6103fd6d9319623cfb0[.]exe | Triage

Sharing

General

Target

NEAS.8ffb223b0d91a6103fd6d9319623cfb0.exe
Size

5KB
MD5

8ffb223b0d91a6103fd6d9319623cfb0
SHA1

0a62f4f784e63153a6d792a1bbf4c7e453beaa27
SHA256

0fa494f437526c32b7057618722e6aff4f51c8f4004d2f1aa37fe0481ae64b28
SHA512

355e3ca5a9aec96aa70502375bf02ee4e262cb1f3271e07e5c5bcbb170cf7c5fa4dbd608d5f1a4fd4054fb5d34a4fc9e7ca0988cdd3531e9f98b901268741e26
SSDEEP

48:6abFtHoWXAmPnc976jy8SeVELzu8ftJ9kdONNiTrg7J20lshlsJ9orw6HzV:NtH9XAF9O09L6dOriTrY2ikIorZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ffb223b0d91a6103fd6d9319623cfb0.exe

Files

NEAS.8ffb223b0d91a6103fd6d9319623cfb0.exe
.exe windows:4 windows x64

5e9babc658b51316cc8954d721341aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ