NEAS[.]f730423b9612713104a89c3a9c18cd10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f730423b9612713104a89c3a9c18cd10.exe
Size

120KB
MD5

f730423b9612713104a89c3a9c18cd10
SHA1

e53e8bd63c6a1344e95ff25b0fca95fbff327106
SHA256

dcbc37da6b889e0e81f6dac9a57c4f82531705fef038f5299020f7a45e07976e
SHA512

1b4c6f3973ef4f8bc8f2c1a35b210a97a35d79ac845f657a1e5b1a0c545c660188b2acca204e18094f29a264702f59916cf1542b6d797c86b40b8b11d6a0b6fe
SSDEEP

1536:U/1FykZiDIteeUe7VaENUzJQe3bSGC6wgUO+u9SmgrHaAe8V+0y:YknOmzJHmP6uvu9yra8Jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f730423b9612713104a89c3a9c18cd10.exe

Files

NEAS.f730423b9612713104a89c3a9c18cd10.exe
.exe windows:4 windows x86

13d16ef5c48307ed7b85b49711e53ecb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
ord670
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord319
ProcCallEngine
ord644
ord100
ord544

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ