3d3eda7893eb1967e54a1d23107c1320_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3eda7893eb1967e54a1d23107c1320_NEAS
Size

53KB
MD5

3d3eda7893eb1967e54a1d23107c1320
SHA1

0401df54f2890bb25ae3176fe6173a59fd890bb9
SHA256

e172adae7619c151300f68cc3b479520b73b49fa44dfc20cde50ac4df523a5f1
SHA512

e31a2521fc850602e6f00645301888545269d07b8c07922fdbeb8fda7ffbbc4f5a55488321eb71c7856a09f27d5cc84f369f4d55900d5cc5190db70d6c730855
SSDEEP

1536:vNbg8r8QTV2Bg7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:D2BgJJjmLM3zRJWZsXy4J9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3eda7893eb1967e54a1d23107c1320_NEAS

Files

3d3eda7893eb1967e54a1d23107c1320_NEAS
.exe windows:4 windows x86 arch:x86

0abad43e831a4d83cef34fd47272b468

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord648
ord570
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ