NEAS[.]86e0a6b799373784ac63b638ad2bb420[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.86e0a6b799373784ac63b638ad2bb420.exe
Size

35KB
MD5

86e0a6b799373784ac63b638ad2bb420
SHA1

b7592bf7a93c6ab7bd4a98767057e9676d560de0
SHA256

1e438fd44b4ed754dd3eedf0ef261aceb253293e579936460de18ddc7f2bdd8b
SHA512

09840673a039e58681fb5f160e86144ebb60adfeff9bbd216a637e8ffe2ed7afe9b13261f1c38fa3f0035577d8318c8e697582721b46b6946bcc27a0d2bb8dce
SSDEEP

384:XIEv8DGOWhGHbfWxXHP92ixflD/RvBsps3/Vy0VCMypKG28zGKjxIB8eaKI9jvWk:XIE0DXbHEHl2i8adHVCMypk8zBYXhv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.86e0a6b799373784ac63b638ad2bb420.exe

Files

NEAS.86e0a6b799373784ac63b638ad2bb420.exe
.exe windows:4 windows x86

60bffc8e3a9dbbf8e31ec224c956576b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord583
ord669
ord702
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord649
ord100
ord432

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ