NEAS[.]40c909a9071cff1758cdee2132116b60[.]exe | Triage

Sharing

General

Target

NEAS.40c909a9071cff1758cdee2132116b60.exe
Size

63KB
MD5

40c909a9071cff1758cdee2132116b60
SHA1

f6da0204efd325c54daed4b9aa55c731c2ee8893
SHA256

32b15feba09f1a88644a22f94aea0b989451837414b04ee48664ca6a9d909834
SHA512

f3866eab92d39efd90679c924a6e2b33ff35cfd9fbe04841760a950842a38a9912afd9811973a4fa7a9e792b3052f1a469608e806b8498390f901ba9d67c265f
SSDEEP

768:CUwJ2cqAqic1xK2Oj+eRLK+7lkD5ocGTeYtYQ6H8K1iijhGJcXMLyGDzvdoi9NI:CUj/ipjrBMZGTevQXkiNsMLXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40c909a9071cff1758cdee2132116b60.exe

Files

NEAS.40c909a9071cff1758cdee2132116b60.exe
.exe windows:4 windows x86

742c30ca911bef9eb4faec10fa4e29fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord586
MethCallEngine
ord513
ord558
ord669
ord702
ord598
ord630
ord524
ord633
EVENT_SINK_AddRef
ord560
ord670
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord613
ord542

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ