NEAS[.]281969a786d1183495728d917e8aead1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.281969a786d1183495728d917e8aead1.exe
Size

56KB
MD5

281969a786d1183495728d917e8aead1
SHA1

aa594cf840db4846b2b95c5f274758ca495c1153
SHA256

53763e474e601378ba048e6d5ee261fb6109ef392bb8a6acd8f3717c17ef3633
SHA512

2f191a11c546c713011756eb86a62373a894fdcf6c01f1f0aeda1834300b79ccd15eb8ff9ad2eff21a75d705c66bdc8bd29b261d29c1b4921f346416f5f468e9
SSDEEP

768:SvO3m8WyE5jXq1aW+t3++t0jqdTRT/ksSs/NU6UThvKDUY7eHSO3vz3niRYqYUWn:yOWra1PFAeDslLYOn62y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.281969a786d1183495728d917e8aead1.exe

Files

NEAS.281969a786d1183495728d917e8aead1.exe
.exe windows:4 windows x86

3e202f83edc5385021a510010ae339d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
ord669
ord702
ord703
ord305
ord704
EVENT_SINK_AddRef
ord675
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ