NEAS[.]160604eab36b8c19b9217000f0847b00_JC[.]exe | Triage

Sharing

General

Target

NEAS.160604eab36b8c19b9217000f0847b00_JC.exe
Size

200KB
MD5

160604eab36b8c19b9217000f0847b00
SHA1

bd39c9325f054bc6c261c5d6699568498d76bb1f
SHA256

fa5d01372cd0f8dfafc08d45797d07606a2b9f2c44cd7612481e8708369e2e00
SHA512

0664856ad081a66044ac96c7e6d5dee0716d1dc69d5cf9cab8f5b078bbe2d8bda472121891b44dae2c1fbef54229da76682c8e1a40a477c91c8eff3500d8ceaa
SSDEEP

1536:LeNCn/HB8HMNYDBbZDeNCn/HB8ir5cCDZ9LczjZZUqoQjj28Fq:LeGOMNYPDeGR5cCDZ9YzUqfZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.160604eab36b8c19b9217000f0847b00_JC.exe

Files

NEAS.160604eab36b8c19b9217000f0847b00_JC.exe
.exe windows:4 windows x86

1c1a4b4b4c223591342ce744d51f8329

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord681
ord100
ord579
ord616
ord617
ord618
ord580

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE