NEAS[.]a292986af0b52417c8039d42301daa20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a292986af0b52417c8039d42301daa20.exe
Size

24KB
MD5

a292986af0b52417c8039d42301daa20
SHA1

f6e63bb58b52de415f43a0ec2a46029d12f39e96
SHA256

84187c65d41eea65e62acf93f265c336eb023756cf539ba42074f777778a18f6
SHA512

80b79ca978527d9e587add88f1b4cb09f9c915cde2a3b6dc842289456c1961eb58a51b85c7df9bbb2dc2d7827df9d08e0658c3c92561514af4c23914e8f7726d
SSDEEP

384:cKDDVohOrKDZW9CTAjvgafKDXKDDVohO:3VohO52AFbVohO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a292986af0b52417c8039d42301daa20.exe

Files

NEAS.a292986af0b52417c8039d42301daa20.exe
.exe windows:4 windows x86

d4b81284f29afb5dd4108e288f4523e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ProcCallEngine
ord645
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ