NEAS[.]NEASfcf12e93cd5a402b9f5c25dfd53b7f30exe[.]exe | Triage

Sharing

General

Target

NEAS.NEASfcf12e93cd5a402b9f5c25dfd53b7f30exe.exe
Size

5KB
MD5

fcf12e93cd5a402b9f5c25dfd53b7f30
SHA1

d09332a2954690ed39e7335d41b4d41efd57b73d
SHA256

c2b1ed0da0d1967f1408d89972b37b2fdb0d505d6234106543ebdeedaf519911
SHA512

c9d5204b84574b77c77057818c20ebce50fc044df7fb8b35104950a9f49780e8e8d9d8b6e5f5a0153b1416ceee3e93f9084a5bf6d23112171509cf67587b1506
SSDEEP

48:6Ds2tHPIWX4u8xmwgakWjjC8vzuEA+LON3pTrg7jARWXRWH9orwSD:IVtHPdX4nmkkibw+LOnTrQ4cIor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASfcf12e93cd5a402b9f5c25dfd53b7f30exe.exe

Files

NEAS.NEASfcf12e93cd5a402b9f5c25dfd53b7f30exe.exe
.exe windows:4 windows x64

976254c559c9ab8bb99578c330cb29e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemReAlloc
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ