NEAS[.]49b6c353760b0740d292ee41497ee520_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.49b6c353760b0740d292ee41497ee520_JC.exe
Size

145KB
MD5

49b6c353760b0740d292ee41497ee520
SHA1

b13f2e85979390d10d6ffc2c0ed21a38fa495d88
SHA256

0a8850feb64992bd89b653c49df65ab77cadc4783e52861ec1c274fad5b9174a
SHA512

3773d5121659347db241d4d51abd52e8466c467a63d84214456dbec48d5d56e5f27b6b53037c4e82e6b2d5dc0d1c1af44685b5f57a8b543c5d4a329909822c5b
SSDEEP

3072:EJ4Qh03+EkO19uSZ+OqGP/kZ0NLKhskUArQ:CK+9O19u+nbUZv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.49b6c353760b0740d292ee41497ee520_JC.exe

Files

NEAS.49b6c353760b0740d292ee41497ee520_JC.exe
.exe windows:4 windows x86

bcce80e41cf0e5f3d68f96d6e41b8475

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord663
ord591
ord598
EVENT_SINK_AddRef
ord528
ord670
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ