NEAS[.]48e13b45631f1c45847cb15c55219690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48e13b45631f1c45847cb15c55219690.exe
Size

104KB
MD5

48e13b45631f1c45847cb15c55219690
SHA1

ab15ac63c22e7904776ff96b5be59e08b0bd0cc7
SHA256

abdde6e8ecd04f396d52343e18131b2acfae8981c65272c6633a8677e3415a72
SHA512

a67b70aaa1a0ff5ad67478b01fa562d8fe1500de0fa71188471b8a646f91bbdde2c796f7ea890a332970a328f390b7de5c2526affaddca602d4f1d2cc06c7abe
SSDEEP

1536:JrczrpVB2SnipmW44B4ugIYZRJbNWE4ghCn1AYuMjOqhum0v:Cf9ipq4B4MYZTbN/Cnmi9hum0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48e13b45631f1c45847cb15c55219690.exe

Files

NEAS.48e13b45631f1c45847cb15c55219690.exe
.exe windows:4 windows x86

66a5dcdb48b0685a52587f6a8ac8e984

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord695
ord698
MethCallEngine
ord669
ord633
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ