NEAS[.]b5079c8559e9c6d2190a5e2b7492b680[.]exe | Triage

Sharing

General

Target

NEAS.b5079c8559e9c6d2190a5e2b7492b680.exe
Size

744KB
MD5

b5079c8559e9c6d2190a5e2b7492b680
SHA1

a60bbd6c3fda0d253fb88c3c08e9fda8d1a95559
SHA256

17befc9800cda80172ec468409b397a520d789f1656d7cd31c6300629746bc6a
SHA512

39dbaaf56c4741bd4867db590d320270fb204ff422a1cd391513eb675ba3abe9c1346d87b2d425053c4f8d21f3ebdcc64a815db99693fc962eba04329c2b8148
SSDEEP

12288:JU1m3vZL4KKgNGEAmt4Y/cDhHheq+65pZ4adE:p3BL4KKggEh4OcLeq+65pZ4aG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5079c8559e9c6d2190a5e2b7492b680.exe

Files

NEAS.b5079c8559e9c6d2190a5e2b7492b680.exe
.exe windows:4 windows x86

935f455570815a33ee18de24e96c031e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord690
ord693
ord587
ord695
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord519
ord629
ord660
ord557
Zombie_GetTypeInfo
ord591
ord300
ord595
ord303
ord598
ord306
ord520
ord521
ord522
ord309
ord523
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord568
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord607
ord608
ord716
ord717
ProcCallEngine
ord536
ord644
ord537
ord645
ord570
ord648
ord571
ord573
ord681
ord685
ord100
ord689
ord610
ord611
ord612
ord613
ord616
ord617
ord618
ord619
ord650
ord581

Sections

.text
Size: 736KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ