NEAS[.]62f4bf84a1493162fa2fb9b2af97c440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.62f4bf84a1493162fa2fb9b2af97c440.exe
Size

112KB
MD5

62f4bf84a1493162fa2fb9b2af97c440
SHA1

76d605666299c0b1596d336ee654b0d6a5f18889
SHA256

2a158afdd0c81807f6989e8cf63359cfecfc68ece8264efc83348f184d975139
SHA512

5722c095fc0e6345d4a5c9023644dd0b9d67d8c6e699d01e34d25e6028b0947c0055ff2511976ee033825964956de62352a04ef4fb61502b0eb2a815fa17d2ff
SSDEEP

1536:ixecRZ4IJRHNQ0IDdElRCtI7BadtybewasxnWXKtGnlW:DcwIjzIDulRCe7B8tybewztCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.62f4bf84a1493162fa2fb9b2af97c440.exe

Files

NEAS.62f4bf84a1493162fa2fb9b2af97c440.exe
.exe windows:4 windows x86

a92b57a3fced8b6bae5e4f2c9cede57a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord585
ord522
ord528
ord561
DllFunctionCall
ord670
ord672
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord542

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ