NEAS[.]05ded79de69ecfc64fb4192608330b80_JC[.]exe | Triage

Sharing

General

Target

NEAS.05ded79de69ecfc64fb4192608330b80_JC.exe
Size

148KB
MD5

05ded79de69ecfc64fb4192608330b80
SHA1

93a01b9ece589caad0b89afe291c9fb2fcabe50e
SHA256

69dabe4ac12bcfaefa396333e8e39c80407c18b03461ec5d228a6011053d99f9
SHA512

cc9cea426cdc4cdf0f99866d619372cb286ed297c765915d8a6611d03bb903f6e054bd5ad3257d7ee6bacab1cf24bd8e7aca8d73f2b0a4adb4f17b1a94a0c8ef
SSDEEP

1536:nbbqw75ttZVBvqFAa/JcP29oVLjrZh1PUShBO00fOqD1zOJh1goOroEB9e2meaoa:JVRU1/ShjFX8SLOrJKJngocoEAEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05ded79de69ecfc64fb4192608330b80_JC.exe

Files

NEAS.05ded79de69ecfc64fb4192608330b80_JC.exe
.exe windows:4 windows x86

42a440928237f0805a7623b2a2bdeb73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord553
EVENT_SINK_AddRef
ord528
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord542

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ