NEAS[.]13adea50a43b7b95b5b62267ad359fa0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.13adea50a43b7b95b5b62267ad359fa0_JC.exe
Size

111KB
MD5

13adea50a43b7b95b5b62267ad359fa0
SHA1

d36ee7190c003f0479eaf89e7d4d18e0926d69df
SHA256

1e6a421eeb1d20b8415a109b65068b5e38999932da6f12fab3f2b039dac72abd
SHA512

5fb0856b67d2e5211e4974672a309e645fb47b298891630692774c6305916df9859d51680fc2b426f0400611d6f42baf6b95379257b3a8999d1661a385d12bb5
SSDEEP

768:sduwfCcqNlW4xlNNQ/ebkP34DGltCJWx+7AppL4zG4dslM8lP+wgG0SXdkUr9Aeb:sdFUz3lY/FlN+aLHM8WSXjya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.13adea50a43b7b95b5b62267ad359fa0_JC.exe

Files

NEAS.13adea50a43b7b95b5b62267ad359fa0_JC.exe
.exe windows:4 windows x86

c6c968ae7809dc065deb7857b5ea8d8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord660
ord666
ord593
ord594
ord704
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ