NEAS[.]33b9591a7c925396ebc77a9b09231330[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.33b9591a7c925396ebc77a9b09231330.exe
Size

133KB
MD5

33b9591a7c925396ebc77a9b09231330
SHA1

4cc2449b7ae3806745f8f3394efc28b51558c9dd
SHA256

0f46d9733da702346f45bd15fca6cd65049f449e9bc052a3ffa163aa115574cf
SHA512

1846e87b8023d857603d3e95841bff14cad7333edd214e3d1ed43f8103bb920f77551ee7d5e708e00d3dcda27ac77af3f8b6798a19af8abca19704d2d2482fc8
SSDEEP

3072:ZpVHT+9KPBsp0+cT+y2afpC9SpV8tMJc9jMHoNEb5WSRzgXB:ZvC03T+AhYSajj6kR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.33b9591a7c925396ebc77a9b09231330.exe

Files

NEAS.33b9591a7c925396ebc77a9b09231330.exe
.exe windows:4 windows x86

9535d1185518a1812a3cd665d0ef5ee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RevertToSelf

msvbvm60

Zombie_QueryInterface
ord702
ord678
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord544

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ