NEAS[.]324814e992389f6fbf10c7df595df610[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.324814e992389f6fbf10c7df595df610.exe
Size

574KB
MD5

324814e992389f6fbf10c7df595df610
SHA1

b2d9555a4cffea4c03ce1aec116f79c12111bc73
SHA256

662ac858b0dbbb4fe5c06c4d0b9d3f5a76d1dfbc1fb8a3a049d42fb1e31365a0
SHA512

0ddcf6bd0dd9333924a80c096f205b665becae4d59981c729f309e385f594880c5bc2ac4b2da0dc7ac8c96e5fbe0f9d9153a9e580295c0d221e945e938109ba4
SSDEEP

12288:Hc4dUMIE8zrHSv0kOxYoszPVPONy47HO5MslZwpokBoIu5Yrqn6b6h7BjvrEH7OK:8mUEWrHSjGPekBmA+6ehBrEH7OK

Score

1^/10

Malware Config

Signatures

Files

NEAS.324814e992389f6fbf10c7df595df610.exe
.exe windows:0 windows x86

Code Sign

33:00:00:00:fd:c7:f0:c9:6a:69:a1:c8:4c:00:00:00:00:00:fd
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:5e:e2:da:26:23:c5:f8:82:2b:00:01:00:00:00:5e
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/09/2018, 20:38

Not After

06/09/2019, 20:38

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0a:59:2b:00:00:00:00:00:3b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

11/02/2016, 23:24

Not After

09/05/2021, 23:28

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:aa:82:5e:56:96:e3:73:e3:2e:db:27:1b:43:7e:c9:2d:80:94:26
Signer

Actual PE Digest

0a:aa:82:5e:56:96:e3:73:e3:2e:db:27:1b:43:7e:c9:2d:80:94:26

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGER32C
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGER32R
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:fd:c7:f0:c9:6a:69:a1:c8:4c:00:00:00:00:00:fdCertificate

Extended Key Usages

33:00:00:00:5e:e2:da:26:23:c5:f8:82:2b:00:01:00:00:00:5eCertificate

Extended Key Usages

61:0a:59:2b:00:00:00:00:00:3bCertificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

0a:aa:82:5e:56:96:e3:73:e3:2e:db:27:1b:43:7e:c9:2d:80:94:26Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 335KB - Virtual size: 334KB

PAGER32C Size: 34KB - Virtual size: 33KB

PAGE Size: 5KB - Virtual size: 4KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 542KB

PAGER32R Size: 1024B - Virtual size: 896B

.rsrc Size: 35KB - Virtual size: 34KB

.reloc Size: 15KB - Virtual size: 15KB

33:00:00:00:fd:c7:f0:c9:6a:69:a1:c8:4c:00:00:00:00:00:fd
Certificate

33:00:00:00:5e:e2:da:26:23:c5:f8:82:2b:00:01:00:00:00:5e
Certificate

61:0a:59:2b:00:00:00:00:00:3b
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

0a:aa:82:5e:56:96:e3:73:e3:2e:db:27:1b:43:7e:c9:2d:80:94:26
Signer

.text
Size: 335KB - Virtual size: 334KB

PAGER32C
Size: 34KB - Virtual size: 33KB

PAGE
Size: 5KB - Virtual size: 4KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 542KB

PAGER32R
Size: 1024B - Virtual size: 896B

.rsrc
Size: 35KB - Virtual size: 34KB

.reloc
Size: 15KB - Virtual size: 15KB