NEAS[.]c2df94ec13ca048d381a4289ae7168d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c2df94ec13ca048d381a4289ae7168d0.exe
Size

36KB
MD5

c2df94ec13ca048d381a4289ae7168d0
SHA1

6f118d945b1e936a58f7677c6ba90499c9ed7b76
SHA256

242726c7c8b4ff6bcf839ce5ddb5e12057ff07c12ed32ddabe3b47867af07f6c
SHA512

bbd42bb7a2799c01a1fa37df0c88ce963475bd042c5805642a0cfeae72f282b48f6c34e3a044dadb8d19bfbfd46e32cdff24dc9cd88d4956cac0340628fa704b
SSDEEP

384:Z0B/QgyuT375RK3l6DNDvnqzemXrJ99/BDmy4todF+HO86CxEh99ymkKTe70:Z0FyuhUMDNDvzmXrJ9Jotov+HO00/kP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c2df94ec13ca048d381a4289ae7168d0.exe

Files

NEAS.c2df94ec13ca048d381a4289ae7168d0.exe
.exe windows:4 windows x86

4ae7360a5c72ae4225e39def9486ad38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord183
ord697
ord698
ord519
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
ord563
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord681
ord100
ord432
ord617

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ