NEAS[.]7291bb8aafdff8b7050e13f3b8a047b0[.]exe | Triage

Sharing

General

Target

NEAS.7291bb8aafdff8b7050e13f3b8a047b0.exe
Size

43KB
MD5

7291bb8aafdff8b7050e13f3b8a047b0
SHA1

b45784c850fde25b461922fdcf79c96bce645ee8
SHA256

1f2c155ef78403c50fc101c4f0b1b138417e7481c2c9d09b6f67a070c70cd124
SHA512

a7e462a78d3b0ad5a0ae99869174936d8723dd99e73d0b80872bc6ab4e24ec357d1af820fb8e5fbde87c16f682f8e6eeb6750a1dbdbc95d46aabda18dcde78d8
SSDEEP

384:jUy7mDk7qKZwr1D+um22Nw/tXRmmEtrNxvb53y2DCuLfgMBK2VuJYgHMOC80Em:jUi7Do1jDaw/q3Nm2VsMc1MOH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7291bb8aafdff8b7050e13f3b8a047b0.exe

Files

NEAS.7291bb8aafdff8b7050e13f3b8a047b0.exe
.exe windows:4 windows x86

29f4c025113ac9f71dafe30e9b7b0089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

StartPagePrinter

kernel32

ContinueDebugEvent

winmm

midiStreamOpen

msvbvm60

ord183
ord698
ord556
ord668
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ