NEAS[.]763d374a4910390b374959e007368f70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.763d374a4910390b374959e007368f70.exe
Size

13KB
MD5

763d374a4910390b374959e007368f70
SHA1

8243dce8d6e8e5e86b78e65a027e94aec4a9f413
SHA256

378a723a0ceb2a1be9263bd314cf8d9b5b0a8e88189f628c825825f2d527bb6e
SHA512

ad41f16eec94189d393fa0185aacda352042cdba65d948053e681a82de75d32dafb8d8947f374aa27eef51b61d926b8d8d447e3a72097542d734da72fc3ee642
SSDEEP

192:5niyBXfmpPL1MtplwXuYyMn0aLcVYzVbEEXSnQX:5fBXfmpDunJMnjLcV05Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.763d374a4910390b374959e007368f70.exe

Files

NEAS.763d374a4910390b374959e007368f70.exe
.exe windows:4 windows x86

f4354479d34e3ae5d312e69d3e18a83a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord595
ord520
ord523
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord536
ord537
ord646
ord647
ord648
ord681
ord685
ord100
ord616
ord618
ord619

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ