NEAS[.]f7a41551edeb89f62af4770376761730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f7a41551edeb89f62af4770376761730.exe
Size

120KB
MD5

f7a41551edeb89f62af4770376761730
SHA1

2010b647ef743cfa054631fe81ced2a7fbf51c95
SHA256

6103fbf9637da23b3bef0c90141ebb1cd5c88e74deb123be5e51b3ac74156ee7
SHA512

4aa253406bf8dcf5802c57f5424c2dc0833b9c87c258f3aac2672f9b11288d363e6a8fe4e6efb1837ff56a11869831fca99861edebfd7fb25dea8ac3a6dbd468
SSDEEP

1536:d4VCpvpI/Bfe06lZexImVc5/jb2y1ZO0cY4a/toWAqdX6:yV/3q7Fb2SZO0xeK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f7a41551edeb89f62af4770376761730.exe

Files

NEAS.f7a41551edeb89f62af4770376761730.exe
.exe windows:4 windows x86

92df27143f7424bbc663a17fcafed639

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
ord513
ord665
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ