NEAS[.]4474299e195e7df0aa898bf53bdf9870[.]exe

General

Target

NEAS.4474299e195e7df0aa898bf53bdf9870.exe
Size

124KB
MD5

4474299e195e7df0aa898bf53bdf9870
SHA1

84b813ae79d5e30777585a570419f9f747c2cf23
SHA256

5ba4e6a3a2ec6b2284a5a89fe38fd204851493016f8406735069a155ab737f46
SHA512

eb79f2b714caf38810e5657d32cf742f4c72b0ebdabc7f3ffdb1f5825ba329a2e8cf2b54fcc03f99ef40de9c8e4c6feb906ad281f8191d148f6ed8696307590f
SSDEEP

3072:SrtehHyXa0sVacMpX+W2LUjK0C0qdwnD88:YYFf0sVa5R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4474299e195e7df0aa898bf53bdf9870.exe

Files

NEAS.4474299e195e7df0aa898bf53bdf9870.exe
.exe windows:4 windows x86

13a79056f0e11a1ea8e12aa3030f7e23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaCyMul
__vbaAryMove
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
ord662
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
__vbaCyAdd
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaCyVar
__vbaI2Cy
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaCyI2
__vbaAryConstruct2
__vbaCyI4
__vbaI2I4
DllFunctionCall
ord670
__vbaCySub
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
__vbaCyUI1
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaUI1I4
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaVar2Vec
__vbaCyMulI2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaForEachAry
__vbaVarCmpEq
__vbaVarAdd
__vbaAryLock
__vbaVarDup
ord430
__vbaVarCopy
_CIatan
__vbaStrMove
__vbaI4Cy
_allmul
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaStrCy
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13a79056f0e11a1ea8e12aa3030f7e23

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 100KB - Virtual size: 97KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 100KB - Virtual size: 97KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 13KB