NEAS[.]b0b414c0e7a9f84f08455ed6a2950990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b0b414c0e7a9f84f08455ed6a2950990.exe
Size

5KB
MD5

b0b414c0e7a9f84f08455ed6a2950990
SHA1

0cb19ebf4a495671ab923a4695ca757bd053db33
SHA256

99d3c6c9e8724c95dc29c6df824b15f58f3da3f6edd4e41bec7a8e9031c29dcc
SHA512

a4b45591768addc1fdebf08360cb2eaeee4a2db7a6dc628b1f781c430c29d24cd829bbd732ebab75ca0d50032eedde82ef509b80a25386df62368fb30f2155dd
SSDEEP

96:5tH9XAY9OMHwlVW6dOriTrHV2ipFp5orV:T9X3OOAA6dOQ2ipFp5orV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0b414c0e7a9f84f08455ed6a2950990.exe

Files

NEAS.b0b414c0e7a9f84f08455ed6a2950990.exe
.exe windows:4 windows x64

61a6dcc4b2df936917f5d47bda805baf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpSvcGetUptime
SnmpUtilOidNCmp
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ