NEAS[.]013a835ee7e1280af73e970d3af091f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.013a835ee7e1280af73e970d3af091f0.exe
Size

44KB
MD5

013a835ee7e1280af73e970d3af091f0
SHA1

a472907b43744b3c687115ef413993a3b6b01b1f
SHA256

bf6ad9409b66dcc386e3183efad18f2a57b2890006e4f7960848ebda6bb352e4
SHA512

aaac79edc3ecb56b5b762af26a1e797fd1b8ea29f235af4fc58fcfbe222dff6db50e32067ba9fc0d068fa5a0b9493de96c05c7419aff43eaddce0106f1e056aa
SSDEEP

768:va/Hdu9nLPWJ68Xe04H7cHPHYmug6UXQm1dIZE2ocOT77e:vpLPNFHyj6S3T77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.013a835ee7e1280af73e970d3af091f0.exe

Files

NEAS.013a835ee7e1280af73e970d3af091f0.exe
.exe windows:4 windows x86

dcd32fd1eefc3c1f5bcc67f2c3a0aa86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ