e713d570f1eff5d8756f25a9b932d8e0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e713d570f1eff5d8756f25a9b932d8e0_NEAS
Size

60KB
MD5

e713d570f1eff5d8756f25a9b932d8e0
SHA1

2802a5188158fdbd74e33a9c989f5b5cfc47e5dd
SHA256

ebfe1e5f82ae20c67be56cdfcfea80dfcf393be10044ace79e9527c51c3ec731
SHA512

5e51f914bb4cc2ae764f1cd5481623752456085507d29a2a6f09e46fc8c97bf7ab3e95787b847079b97641775610871f298ccca81f678215a5cab53be1e9a327
SSDEEP

768:APakaHwsqLSfc1mvhCUMM6pj9z0RFFIkScXFIk9d+r2EY8F2X5ISYn6d1pAspq6a:BUun3ns2X5hh3/SZ0NMtMml4SDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e713d570f1eff5d8756f25a9b932d8e0_NEAS

Files

e713d570f1eff5d8756f25a9b932d8e0_NEAS
.exe windows:4 windows x86 arch:x86

184bae34cec7721822b9682e22f6cafe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord187
ord696
MethCallEngine
ord517
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord100
ord614
ord431
ord617

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ