NEAS[.]c7bac1aad676c0e242aafbeb111cb410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c7bac1aad676c0e242aafbeb111cb410.exe
Size

56KB
MD5

c7bac1aad676c0e242aafbeb111cb410
SHA1

3db09ae29cc99bce99d3360b6cb25ff2e9b2e9e4
SHA256

a52e527ef27ba49f8b1f57bbb9339429afd2383fc8821869b078bd88a25928ca
SHA512

b26a0c24621dc03e99e7a05b3fe3ba2e2d885fa9e72d3df6c3bbdaca0f4a06e705c73fa1d4437dfefc60fd29cb24811e98ec7a4cc1824472aa01ac2af15ca856
SSDEEP

768:xIMNEhmY5gvg4WQ9v+6wH9H7MfygXaDMFQXD7eKzZ:xIMamVx6NNDsQXD73Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c7bac1aad676c0e242aafbeb111cb410.exe

Files

NEAS.c7bac1aad676c0e242aafbeb111cb410.exe
.exe windows:4 windows x86

547d7423acd796279a87485800325b15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE