NEAS[.]3ea78cf330826e141ad921e69c0de7e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3ea78cf330826e141ad921e69c0de7e0.exe
Size

304KB
MD5

3ea78cf330826e141ad921e69c0de7e0
SHA1

62271da65aba135337188a86c5ed05712d4a9767
SHA256

7298272077bda3eecd0d4e130161e20d85c839f4eed558ba9ea8b9fff4d010e5
SHA512

15f492926d5bceef11a0ed377af2f24ac1bd2f36002122e6d37b08a6ea5716428fa973462217dfc05f18d879744f4865fa8e4afb6bdba1a85e0c067965f5c825
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ea78cf330826e141ad921e69c0de7e0.exe

Files

NEAS.3ea78cf330826e141ad921e69c0de7e0.exe
.exe windows:4 windows x86

ec93d43ff758b5de7005a039a7bf80b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord697
MethCallEngine
ord628
ord661
ord662
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord100
ord546

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ