NEAS[.]bb9b3cfc71ed8ee8d431bda0d17ace30[.]exe | Triage

Sharing

General

Target

NEAS.bb9b3cfc71ed8ee8d431bda0d17ace30.exe
Size

1.5MB
MD5

bb9b3cfc71ed8ee8d431bda0d17ace30
SHA1

195ffe3bca9ae62799b56a39c46e1a7212e21f3f
SHA256

7d0cb1807bfe0ea53287503685a8a8bd925b8644aeafb7ac3380bbbd3b4e1147
SHA512

4a622741c7a7a43dce0987d9fe112e4da0bf54806226da1d4c987f7caa1ff64d07540403351c914376bec0636a6df90c136cad6e9ad83ea0ced73cfb26054325
SSDEEP

24576:jL61zv5FOOPe/K7DqAGhlKwX58mnZIP7p6nZoCI7OhW11fjjd6y/:jL6v8x/K7DqAKXumZupeZBIaajd6y/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb9b3cfc71ed8ee8d431bda0d17ace30.exe

Files

NEAS.bb9b3cfc71ed8ee8d431bda0d17ace30.exe
.exe windows:4 windows x86

510b418790bae695d0f23767be465280

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteA

comdlg32

PrintDlgA

qtintf70

_QWidgetList_next

Sections

CODE
Size: 1.2MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE