NEAS[.]57dea59ece4b7462feb7d2da6010ef90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57dea59ece4b7462feb7d2da6010ef90.exe
Size

148KB
MD5

57dea59ece4b7462feb7d2da6010ef90
SHA1

6a206aea62769247e120d725abdb90cf02e17816
SHA256

730e8cd2c21d39e6f78ca93b35e3f35d8296a0e460065a5eb417daf191f52076
SHA512

b69f2090518649fc9c3c67c23eef8f2ef00341da48b24cd71623e19566b7fa246edc2d90b966d7f2d6f0ddcd7f9e8111edfeddaf8388cd3a671cbafea16b161d
SSDEEP

3072:vu5PDykjCqw2hyNK7D6zd43+P+kdMTe+EZ:vpr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57dea59ece4b7462feb7d2da6010ef90.exe

Files

NEAS.57dea59ece4b7462feb7d2da6010ef90.exe
.exe windows:4 windows x86

cc456609331302e0b767992023b616d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord517
ord519
ord628
ord593
ord594
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord607
ord608
ProcCallEngine
ord644
ord537
ord570
ord648
ord571
ord572
ord100
ord616
ord618
ord580
ord581

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ