NEAS[.]c72921f048a9f2aa35f3985afb3db9f0[.]exe | Triage

Sharing

General

Target

NEAS.c72921f048a9f2aa35f3985afb3db9f0.exe
Size

5KB
MD5

c72921f048a9f2aa35f3985afb3db9f0
SHA1

6ed5c53dfbc873d4a9a11a8b893a2f5a6fda5bf6
SHA256

ebd28998c1fef02be28f6e68a8bd3b05ac0611a6be99e80cffde1b9fab7bcb74
SHA512

8d4c072610c3da20aa5e0ff86d80f0d76063e421b7bc74ca82ef210e04ca2a1d9972c2e27f50135a6351b9c9007a66469dd1e09c0caa4c0d5d82202055fc57ea
SSDEEP

48:6NjvtHxWXZR/40l8aHzADzuLhQxrONvTrg7tDGdVfdVN9orwwziL:YvtHwXZJ40lX6O2xrO9Trgqor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c72921f048a9f2aa35f3985afb3db9f0.exe

Files

NEAS.c72921f048a9f2aa35f3985afb3db9f0.exe
.exe windows:4 windows x64

2cf2110954736074e28b0bc586f51602

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilVarBindFree
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ