NEAS[.]8862a57507e76a56a6df9f16d6d98c50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8862a57507e76a56a6df9f16d6d98c50.exe
Size

124KB
MD5

8862a57507e76a56a6df9f16d6d98c50
SHA1

99f35c61024a8d311ce151f4dea623c35a8c7ad5
SHA256

6b9b14dac98869ffee8fc08db2df8940507a3abf4e6a2a66eaaa7fa0736c2ba2
SHA512

ad6bd6d4a7841997b63395a38dfb0bdd8e62fe17ca4dc5aa9014013995cb1ded6e1788e1de3eb143a8c0590346c8e34f9cc349d58163fb2c2cac0cf95ed9146e
SSDEEP

3072:VvHbt5Qp0gThXYB+1cXcgmEFFoBI7mMsiN8kbc:DxPB+WfmVI7mMs88kQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8862a57507e76a56a6df9f16d6d98c50.exe

Files

NEAS.8862a57507e76a56a6df9f16d6d98c50.exe
.exe windows:4 windows x86

9d80ea0cc05a0dd1e7ce30721664e0f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord553
ord557
ord558
ord669
ord702
ord630
ord709
ord633
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord681
ord100
ord613
ord615
ord544
ord545

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ