NEAS[.]0fff07d85e667970044ef694943f07e0_JC[.]exe | Triage

Sharing

General

Target

NEAS.0fff07d85e667970044ef694943f07e0_JC.exe
Size

140KB
MD5

0fff07d85e667970044ef694943f07e0
SHA1

5a034fce4e3790e3c55a9ed912f630e2b00df804
SHA256

8aeb5f3c67e25da8d28c9ef7af7468c295becd963b83bee450b47a4bb740d6d4
SHA512

24125e5051a86c55b8f404594df1fae3054a978bb0c7d859d1075fadbf0ae21ebeada877508f3d2991a373d392d62065d603a4428f79bbc46a616d530423a537
SSDEEP

1536:NBFwVhEMzaWpvsD3zNJVF7XzKCNdEE6b09yppXOBwR9Qq1F0n+kWNICvqY:qukpv43nVZ/fEwypRqwR9ZH0XJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0fff07d85e667970044ef694943f07e0_JC.exe

Files

NEAS.0fff07d85e667970044ef694943f07e0_JC.exe
.exe windows:4 windows x86

5a780bca172643cd620605cc82b6b723

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord515
ord516
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord649
ord100

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ