NEAS[.]3ab721ade96943c3f5ed4b035100c400[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3ab721ade96943c3f5ed4b035100c400.exe
Size

144KB
MD5

3ab721ade96943c3f5ed4b035100c400
SHA1

e2b7ce690ec9e31f155087eee58e2c15d0ae0aff
SHA256

e905670582864331af675710f70d00b054f834fe7432fec80bd91c6657f8774e
SHA512

2532c8ec8f3492832673ba8427e4ec9a7a79481cfefe9781e55ac8149470094163a8e7804557bad0e36db215a4725723dcff94d4c434b4a7468bcf20c2173957
SSDEEP

1536:KFNJIHWAsbWDG7SDu+LV8WzKVDvsAhqmS7tLxlGvNHrPiDhC:ecVsHGDjV8cKlsAhzS75xlez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ab721ade96943c3f5ed4b035100c400.exe

Files

NEAS.3ab721ade96943c3f5ed4b035100c400.exe
.exe windows:4 windows x86

3a29d272d1122a9b1267f2d41771666b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
ord665
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord619

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ