NEAS[.]03ed12bea325ea1969cb614d4bd1a120_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.03ed12bea325ea1969cb614d4bd1a120_JC.exe
Size

35KB
MD5

03ed12bea325ea1969cb614d4bd1a120
SHA1

d913da9d979da7d27f677afa39182b09dddaa9bd
SHA256

1067d90573412ceb306b59c834024dac7ebe18eea7baee091bf693903e6fa4cd
SHA512

0fee48bf03e84a30f13e0c7cdbc68339f16d3f774f362ea917d2a7b0f0b9a3b8e86dedc69b51f952eb314e6bc8f0fa68d90f1393fa7b9ca73c8e6372b3aea7a3
SSDEEP

384:CTrp4wJO0StT6aak3SKHW7b3UU/13HrbFeWFhWziaEtijLF:2dnJOhWKHOU63HrbHWz4tij5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03ed12bea325ea1969cb614d4bd1a120_JC.exe

Files

NEAS.03ed12bea325ea1969cb614d4bd1a120_JC.exe
.exe windows:4 windows x86

aeb8b8016b2262be9c43cad17011fdad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord696
ord697
ord698
MethCallEngine
ord519
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord676
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord539
ord647
ord570
ord573
ord681
ord100
ord617

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ