NEAS[.]3901897b91cdb72f5e159c5ad3d79b80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3901897b91cdb72f5e159c5ad3d79b80.exe
Size

102KB
MD5

3901897b91cdb72f5e159c5ad3d79b80
SHA1

ae8cb69ee087b7034fd4da735b36a53ef1e534be
SHA256

1448117882e92e88407382e49f70e92bc9a8f39d4ee64c59fb74eb837d407179
SHA512

d9eeb6d69e5b193eb92b79ee5bb8541b008ef6d88589cfdb40045ff698a58c2800357b47901b8ae9409018095e57f0524b980ba402041ce26af8647f04ec9e7f
SSDEEP

3072:6NuLDCQtjIBv2QYLoq7XADAKWWkG6PJLpRsK:NDSBvxDQXyAKnkDPBpRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3901897b91cdb72f5e159c5ad3d79b80.exe

Files

NEAS.3901897b91cdb72f5e159c5ad3d79b80.exe
.exe windows:4 windows x86

2575b5fee287e3dd6950ea73413c0f23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
ord669
ord592
ord702
ord633
ord677
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord541

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ