NEAS[.]3817279a24fe323bf042bd6131461f6df1113c21eb32cf7a844c874f8705f694exe_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.3817279a24fe323bf042bd6131461f6df1113c21eb32cf7a844c874f8705f694exe_JC.exe
Size

9.2MB
MD5

9bfb131696e6424fa69fb123c2160e5e
SHA1

64f1dd5c77ea98a1c295254fc70faa4c8cfc8e89
SHA256

3817279a24fe323bf042bd6131461f6df1113c21eb32cf7a844c874f8705f694
SHA512

f9df9ab6ed5d37cde13b9b55e43579bd2a74dc6c763d4c2a751e99d760b2d88077d0fc8de1116b48f252edd681a656671d3c660b49fdef27519e875fb023619c
SSDEEP

98304:hJF94R1Nci5ZfoHkAvG5qkjXbg7watrgIsG1gb5hpo0jP0rv1h26HJSz44Hk7c1t:hy1e0jEG5qe8gIsYw40jGvDo4E1t

Score

1^/10

Malware Config

Signatures

Files

NEAS.3817279a24fe323bf042bd6131461f6df1113c21eb32cf7a844c874f8705f694exe_JC.exe
.exe windows:5 windows x64

6776d1a14285e6e41d63673627273c93

Code Sign

35:5a:b5:dc:02:c9:ef:31
Certificate

Issuer

CN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk

Not Before

05/09/2023, 00:00

Not After

05/09/2025, 00:00

Subject

CN=ScallyMilano,O=ScallyMilano,L=ScallyMilano,C=RU,1.2.840.113549.1.9.1=#130c5363616c6c794d696c616e6f

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

35:5a:b5:dc:02:c9:ef:31
Certificate

Issuer

CN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk

Not Before

05/09/2023, 00:00

Not After

05/09/2025, 00:00

Subject

CN=ScallyMilano,O=ScallyMilano,L=ScallyMilano,C=RU,1.2.840.113549.1.9.1=#130c5363616c6c794d696c616e6f

Extended Key Usages

ExtKeyUsageCodeSigning

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:96:b3:2e:3b:cc:00:fa:fa:36:2f:2c:c9:3f:8e:2b:ef:5f:df:e7:7c:fd:9d:d9:f4:55:b8:ae:ed:5c:6e:8c
Signer

Actual PE Digest

ec:96:b3:2e:3b:cc:00:fa:fa:36:2f:2c:c9:3f:8e:2b:ef:5f:df:e7:7c:fd:9d:d9:f4:55:b8:ae:ed:5c:6e:8c

Digest Algorithm

sha256

PE Digest Matches

true

bf:52:9d:d1:fe:55:d7:a7:4c:af:89:b9:1f:a4:ef:43:35:fb:7a:1c
Signer

Actual PE Digest

bf:52:9d:d1:fe:55:d7:a7:4c:af:89:b9:1f:a4:ef:43:35:fb:7a:1c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

__C_specific_handler

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.&L{
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KjE
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.h<p
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;RG
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6776d1a14285e6e41d63673627273c93

Code Sign

35:5a:b5:dc:02:c9:ef:31Certificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

35:5a:b5:dc:02:c9:ef:31Certificate

Extended Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ec:96:b3:2e:3b:cc:00:fa:fa:36:2f:2c:c9:3f:8e:2b:ef:5f:df:e7:7c:fd:9d:d9:f4:55:b8:ae:ed:5c:6e:8cSigner

bf:52:9d:d1:fe:55:d7:a7:4c:af:89:b9:1f:a4:ef:43:35:fb:7a:1cSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 7KB - Virtual size: 6KB

.pdata Size: 2KB - Virtual size: 1KB

.xdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 5KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.&L{ Size: 1024B - Virtual size: 904B

.KjE Size: 1.9MB - Virtual size: 1.9MB

.h<p Size: 2KB - Virtual size: 2KB

.;RG Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 11KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 904B

35:5a:b5:dc:02:c9:ef:31
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

35:5a:b5:dc:02:c9:ef:31
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ec:96:b3:2e:3b:cc:00:fa:fa:36:2f:2c:c9:3f:8e:2b:ef:5f:df:e7:7c:fd:9d:d9:f4:55:b8:ae:ed:5c:6e:8c
Signer

bf:52:9d:d1:fe:55:d7:a7:4c:af:89:b9:1f:a4:ef:43:35:fb:7a:1c
Signer

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 7KB - Virtual size: 6KB

.pdata
Size: 2KB - Virtual size: 1KB

.xdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.&L{
Size: 1024B - Virtual size: 904B

.KjE
Size: 1.9MB - Virtual size: 1.9MB

.h<p
Size: 2KB - Virtual size: 2KB

.;RG
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 904B