NEAS[.]1569652cb1f1c14c2bd2c78cee2962a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1569652cb1f1c14c2bd2c78cee2962a0_JC.exe
Size

304KB
MD5

1569652cb1f1c14c2bd2c78cee2962a0
SHA1

8a4716ea45102ac268b457f708ce6318fbce2dda
SHA256

7b32b0278668477ffe9fc8257a68ffdc588c0f0062affa500d1a32f34bccb36e
SHA512

b170ed43aa0765dab3ac45d6582c6ec0a5d204a199e674c31686f876ccb5fc87c39e9a1a43b7b79fc549db5a39f435bc9352dd42dc36fc8f043c7cb6f2de0867
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1569652cb1f1c14c2bd2c78cee2962a0_JC.exe

Files

NEAS.1569652cb1f1c14c2bd2c78cee2962a0_JC.exe
.exe windows:4 windows x86

ec93d43ff758b5de7005a039a7bf80b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord697
MethCallEngine
ord628
ord661
ord662
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord100
ord546

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ