NEAS[.]40c0ecb040402c45cf878ca09aa47be0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.40c0ecb040402c45cf878ca09aa47be0_JC.exe
Size

22KB
MD5

40c0ecb040402c45cf878ca09aa47be0
SHA1

d0cf8874636869aa07dbb900e92533df0d6255e9
SHA256

56f4cab9c88d59a96c40e95305466d16f39d832b4890b81e7607250e32ceafee
SHA512

b929a0b883cbc3ee26da8b83afb2f09af329b7a754cd4405ef96ec6c902d7a098d801e4b94f508fa4983be524b81fc6d64b83d548e0477bb04aec4d2b3750382
SSDEEP

384:VRxKBZvkf25IF/p6ZYvmnP/73xeQzKFMfO5RY7SN0HeZAj6cohb5RA:gBZvkf25IF/p6ZYvmnP/73xeQzKFMf2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40c0ecb040402c45cf878ca09aa47be0_JC.exe

Files

NEAS.40c0ecb040402c45cf878ca09aa47be0_JC.exe
.exe windows:4 windows x86

2843e67501c25f9f9cd84eb49e281f9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord690
MethCallEngine
ord517
ord667
ord669
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord616
ord618
ord580

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ