NEAS[.]18ca266c4512d4240ab8fb5587a7a200_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.18ca266c4512d4240ab8fb5587a7a200_JC.exe
Size

172KB
MD5

18ca266c4512d4240ab8fb5587a7a200
SHA1

5534ba23f789ed62cc5c1f6eed8dc7643ff0f75b
SHA256

f56e5e436fd38f768596eee15a73006b14de0a5ba991ffa95595c32e1eb1f69d
SHA512

16d7ad1eec6379c9776de75a5880050bcb7b0a3c6739e283b945b17bcc0af06fa2023e319dfe05da04bec6b817fa4757e2b2541a04d30269649cf22c84bcc9ae
SSDEEP

1536:B1tos56XyKkWHJUBx9bCbeUCjnjaKrt1KLlMvd9fb3ITbFfT6IBTtJQLg29SpDl:WcoHWBvbUCPa8YuV9LIFTXBTrw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.18ca266c4512d4240ab8fb5587a7a200_JC.exe

Files

NEAS.18ca266c4512d4240ab8fb5587a7a200_JC.exe
.exe windows:4 windows x86

115aa4954ada98fa3f3b2e46c971d844

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord562
DllFunctionCall
ord676
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord530
ProcCallEngine
ord571
ord680
ord100

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ