NEAS[.]c49b626224ab8f76ef332cf560e90540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c49b626224ab8f76ef332cf560e90540.exe
Size

5KB
MD5

c49b626224ab8f76ef332cf560e90540
SHA1

cfc5793563b189571011ffe33b571c3a1d84008a
SHA256

78e01f1031bfa886e3617c0cc1aa75e4b8b3be7af8c9da2bec0bc2fdb0063f53
SHA512

7798c0bb42215e30b8c96e4786342449d6d06e70dd3bb451b5f9e87c845bddd95166e5d000c8c20d1ac4a65d01b820ef8bd46c824b9579256f1c5e5e4affb784
SSDEEP

48:6JBtHfIWXogLHEl92al0WtqpoaB8nAL0kzuO/jc9ON48Trg7NYW317O1709orw2p:+tHFXodPBl07oG1rc9OHTr8f3U+or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c49b626224ab8f76ef332cf560e90540.exe

Files

NEAS.c49b626224ab8f76ef332cf560e90540.exe
.exe windows:4 windows x64

d455c62e409351c43a687d6805880574

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ