NEAS[.]da4d4cb088d3bb4f4fc059e9c70e4910[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.da4d4cb088d3bb4f4fc059e9c70e4910.exe
Size

6KB
MD5

da4d4cb088d3bb4f4fc059e9c70e4910
SHA1

3513de7202a6a8e39ae55eb7492fbf63655e6bdb
SHA256

95a9e506771408eb9b476f628845c93d597a7498220fefd02adb2ffbcf41f848
SHA512

ac8a4ea1cd5f4ed1a9b4b9ac365be019c66f76aab0b3faf9d27822109930314845b6439c95832ede0fbce51d4509b63bff1a9cc26234e85664682e2d6668de13
SSDEEP

48:6fQtHnWXbrCFYGaVDPBLXm9zacF74Ts5zuy2hrlFjNpTrg75YI0FiFI9orws3G:BtHWXbpGshcN2VlFjPTrurCM8org

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.da4d4cb088d3bb4f4fc059e9c70e4910.exe

Files

NEAS.da4d4cb088d3bb4f4fc059e9c70e4910.exe
.exe windows:4 windows x64

8016e02b7f294a6891851706782ea704

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ