NEAS[.]NEAS29be233e66a15a3c64938e43d2396770exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEAS29be233e66a15a3c64938e43d2396770exe_JC.exe
Size

120KB
MD5

29be233e66a15a3c64938e43d2396770
SHA1

d2f7d5ad4be80e1b4f0919642040d149edd53e7e
SHA256

6aeda9317952d5058db22a9cceff869b36da9d77ca9c4fbc53d7a3d164f12d65
SHA512

423557d884b42f7bc86153058864ebc9420d544fc95b44a41b6fbfdcd42c05c68eca61fc260115030d743a86fc17cf84cc7759b244e7ce29f2ee8eee890d1015
SSDEEP

1536:HEsSRnX0pstP2xqAIoQXjAzgl+COiUsX4op3bD9R3XmLRHlPdAnyai:klXZ92wxog+COdopbhClVKLi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEAS29be233e66a15a3c64938e43d2396770exe_JC.exe

Files

NEAS.NEAS29be233e66a15a3c64938e43d2396770exe_JC.exe
.exe windows:4 windows x86

1adb915c40d157051f5bd5d7bece9b23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
ord305
EVENT_SINK_AddRef
DllFunctionCall
ord670
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ