NEAS[.]178cd7746e4d02e6511e699b4404b920_JC[.]exe | Triage

Sharing

General

Target

NEAS.178cd7746e4d02e6511e699b4404b920_JC.exe
Size

304KB
MD5

178cd7746e4d02e6511e699b4404b920
SHA1

364a9c6c963d74abb7aaebb3ba8c66a89ba21226
SHA256

efe88bbefab5c337afd739512f320e59ef990e1df20e41b26fb97d46f689d5a9
SHA512

959cbb9648a249396e8ba2c12c9e36e83038d49f420325865c3b6d23dbeb29fbf4994fc817aa46b0bdca442aacd5da890d20117723b14f8752b7b2301cdfb28b
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.178cd7746e4d02e6511e699b4404b920_JC.exe

Files

NEAS.178cd7746e4d02e6511e699b4404b920_JC.exe
.exe windows:4 windows x86

ec93d43ff758b5de7005a039a7bf80b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord697
MethCallEngine
ord628
ord661
ord662
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord100
ord546

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ