NEAS[.]0f5720a466fe03d15874ba39c8628430_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0f5720a466fe03d15874ba39c8628430_JC.exe
Size

128KB
MD5

0f5720a466fe03d15874ba39c8628430
SHA1

052954e9e41e666ac7b738ed06b8bf0d5ab94866
SHA256

965fa6a30759d32044f5a4a6f7144a7f5a761706f1036f6094afac52362b73c6
SHA512

c9d8de604689cbbe67630b6921023ed50114e6c7b6475de104303fdbc347417a4178cb940942d34daee356cc9b157a9aabbc5cab89b647f2747a15b39465277d
SSDEEP

1536:Evsz1yNHARixCMQSHePw5Xto60d1CyDK48ge:Ev0M1qSSCXtPpge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0f5720a466fe03d15874ba39c8628430_JC.exe

Files

NEAS.0f5720a466fe03d15874ba39c8628430_JC.exe
.exe windows:4 windows x86

30a1c4b1d841dca91e8d9ea76f904bbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord645
ord100

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ