NEAS[.]2d75702c0fec627b3c4cf47ce1dd4a56_JC[.]exe

General

Target

NEAS.2d75702c0fec627b3c4cf47ce1dd4a56_JC.exe
Size

72KB
MD5

2d75702c0fec627b3c4cf47ce1dd4a56
SHA1

d734e9039debe2778e7e7f639e31119411befe0a
SHA256

fd410fee426bebe9a1ddd50f379cf761b63585e645aed3fa498ca424e997908f
SHA512

04bcd0f4895684f86cb75ccb3b43f4e1c3531862d53492c27c720091a500444441744afdc18bffa17e94c9bd69274db0b3f4da8d4fc6a9f82a290bf06cb517b7
SSDEEP

768:sFvlTk+b1qlvRtIO77ByRlCIHN+zjeObtnHHqa6pL15XM13QdQ0x0TStQao8P/L+:SVqLqOOgzj7dHF4nXQo0r+8N1EEJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d75702c0fec627b3c4cf47ce1dd4a56_JC.exe

Files

NEAS.2d75702c0fec627b3c4cf47ce1dd4a56_JC.exe
.exe windows:4 windows x86

bea248e94e943c80e13543c282706928

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetConnectionDialog

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaCyMul
__vbaAryMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
_adj_fprem1
__vbaStrCat
ord553
__vbaSetSystemError
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaCyVar
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaCyI4
DllFunctionCall
ord563
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
__vbaCyUI1
EVENT_SINK_Release
ord679
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaStr2Vec
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord644
_CIlog
__vbaCyMulI2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaFpCy
__vbaVarAdd
__vbaAryLock
__vbaVarDup
__vbaAryVarVarg
ord430
__vbaVarCopy
__vbaFpI4
_CIatan
__vbaStrMove
__vbaForEachVar
__vbaI4Cy
__vbaStrVarCopy
_allmul
ord545
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeObj

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bea248e94e943c80e13543c282706928

Headers

File Characteristics

Imports

mpr

msvbvm60

Sections

.text Size: 60KB - Virtual size: 57KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 57KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 2KB