NEAS[.]0eb5f837c3d321685d10a488a1029260_JC[.]exe | Triage

Sharing

General

Target

NEAS.0eb5f837c3d321685d10a488a1029260_JC.exe
Size

104KB
MD5

0eb5f837c3d321685d10a488a1029260
SHA1

5ffe83da55eb5fed6e0406fe3ada62628fe16c40
SHA256

7de4f9073897f2a2f850b22e6cf402829112f8b61ed5f9bf474baf4b5f70e9e5
SHA512

f002856566039f88b0e97c9aaf9ab820a604394220a4356491e9c0f2d9e3fd015e0e05303a59055b3f2f9e2d989a787348aecb0a5e4edc20188012dd4364beb0
SSDEEP

1536:gPxrpepEzNz5XsBLEMT2nYjRZTr95oxhrBAguvH/dXe3uUXq5YuM5mQGmqq:ye+N1XsBLVrr9WPr+gMB6uIAYmQGmqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0eb5f837c3d321685d10a488a1029260_JC.exe

Files

NEAS.0eb5f837c3d321685d10a488a1029260_JC.exe
.exe windows:4 windows x86

66a5dcdb48b0685a52587f6a8ac8e984

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
ord698
MethCallEngine
ord669
ord633
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ