NEAS[.]d3468327e745cce628f6f6c31d986290[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d3468327e745cce628f6f6c31d986290.exe
Size

5KB
MD5

d3468327e745cce628f6f6c31d986290
SHA1

f4ebdef207c4f43df5ed03344f44160d522d57bb
SHA256

ff292a3d72c86b79967bb4eb13d5d7d9f71df72b6f91c1e2ba19c129e6bc4e50
SHA512

cc67059b37e7700ddc296e9c170f245d0bdfe6bb1157ad5d45e79c8e8ed1e5a2feaa967f3f3dae1c8915b07f95aa76aa0acc4d44f34a35719ac9a99cc88527a8
SSDEEP

96:3NtHvdXYDjGES/wZybVgOMTrhzBqsorf:3vvdXmKEcwKVgOGqsorf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d3468327e745cce628f6f6c31d986290.exe

Files

NEAS.d3468327e745cce628f6f6c31d986290.exe
.exe windows:4 windows x64

1c55d9e70e2fa4568a6cd3115cc5ddc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilOidFree
SnmpUtilMemReAlloc
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ