NEAS[.]19ad0a8933444fef529eebfc0c015140_JC[.]exe | Triage

Sharing

General

Target

NEAS.19ad0a8933444fef529eebfc0c015140_JC.exe
Size

112KB
MD5

19ad0a8933444fef529eebfc0c015140
SHA1

2a7ecdb95fb655e33ca8791a66b6e52e7f65b452
SHA256

72ce558438ce0c94ade7a0d1b7aab4f3163b40c52785f994ce4a8265bc5cd40c
SHA512

f3254200575eda2048332cbc4a87d29a816f80597b4803042e05ad28c2019ef7309c49104f318e7de7069a74ae9db0bf92338e710eeebfbebec494f056bab50c
SSDEEP

1536:9acTW6flUmAJIVMvnwRcpzonFdqquwo2NSKlnayY72j0MYszD3l1JeJ:Mk3lTgIVdRGdqS6SKlp+2ITglOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.19ad0a8933444fef529eebfc0c015140_JC.exe

Files

NEAS.19ad0a8933444fef529eebfc0c015140_JC.exe
.exe windows:4 windows x86

059ba7beeb62d6b88cf620af5c4feeb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord305
EVENT_SINK_AddRef
ord670
ord672
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord543

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ