NEAS[.]b38a9d66952287ad45da9f2136044900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b38a9d66952287ad45da9f2136044900.exe
Size

68KB
MD5

b38a9d66952287ad45da9f2136044900
SHA1

2fdb135b392c640cafa0eab91334a254e06321aa
SHA256

06954f5fda1f7412c2ad821ae3be1de11bb6e708f6f2e870d60ce33bb57151dc
SHA512

373de55968003f80327365f537d670fa014e24baeb2ab1de1d400f2cc381f2668a0a657b1e32a29f6d22358f3b27f47eefa7fa00e09babb530bbc6435b46144d
SSDEEP

384:bdKDDVohOrKDeffOWJWD8iAy9Llunr3BKDXKDDVohO:aVohOT3ORrTLur3dVohO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b38a9d66952287ad45da9f2136044900.exe

Files

NEAS.b38a9d66952287ad45da9f2136044900.exe
.exe windows:4 windows x86 arch:x86

d71d58e34984c55d8761a3a27bd3b159

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord716
ProcCallEngine
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ