NEAS[.]248ce137a47fc3e4478645d9a9053e40[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.248ce137a47fc3e4478645d9a9053e40.exe
Size

7.6MB
MD5

248ce137a47fc3e4478645d9a9053e40
SHA1

f6e09217d0450519b402f4d8a6c1c83370b1e26a
SHA256

71057e1e6d4bfeb01071f8ed0d432b5411356ec268558aa05d5f5501b96ec8fe
SHA512

a106ab03cb0d32e1b5d6030b4bb875b2429df3d2ede2926508fac7d925ac20b81b6a6d0f3d35ab330bdb4cbe62be53d71e3faf063076f7f0be220315e4e783f6
SSDEEP

98304:AGs1+Ad3mS2oImgx9+HWCQ8vUu5C7BRTKpW+8w/02qVEoEaHPl/jzkzRAliefeGq:88AdbImgx+WC5v8tR8iWFqd/kzaiefxq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

NEAS.248ce137a47fc3e4478645d9a9053e40.exe
.exe windows:6 windows x86

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:43:f1:67:11:d0:4f:76:2d:6e:e7:dc:ba:c1:ee:cc
Certificate

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

06/10/2021, 13:43

Not After

05/10/2024, 13:43

Subject

SERIALNUMBER=0000705316,CN=Regnator Sp. z o.o.,O=Regnator Sp. z o.o.,POSTALCODE=42-400,STREET=Sienkiewicza 16,L=Zawiercie,ST=śląskie,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0c437ac49973746f63686f7761,1.3.6.1.4.1.311.60.2.1.2=#0c09c59b6cc485736b6965,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

32:cd:e3:03:5b:7d:1a:85:dd:74:0f:99:86:cb:46:7b:ec:40:a0:4b:43:07:b6:b3:5e:42:f6:32:1e:b2:3a:47
Signer

Actual PE Digest

32:cd:e3:03:5b:7d:1a:85:dd:74:0f:99:86:cb:46:7b:ec:40:a0:4b:43:07:b6:b3:5e:42:f6:32:1e:b2:3a:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 27.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89Certificate

Extended Key Usages

Key Usages

22:43:f1:67:11:d0:4f:76:2d:6e:e7:dc:ba:c1:ee:ccCertificate

Extended Key Usages

Key Usages

32:cd:e3:03:5b:7d:1a:85:dd:74:0f:99:86:cb:46:7b:ec:40:a0:4b:43:07:b6:b3:5e:42:f6:32:1e:b2:3a:47Signer

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 27.1MB

UPX1 Size: 7.4MB - Virtual size: 7.4MB

.rsrc Size: 130KB - Virtual size: 132KB

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

22:43:f1:67:11:d0:4f:76:2d:6e:e7:dc:ba:c1:ee:cc
Certificate

32:cd:e3:03:5b:7d:1a:85:dd:74:0f:99:86:cb:46:7b:ec:40:a0:4b:43:07:b6:b3:5e:42:f6:32:1e:b2:3a:47
Signer

UPX0
Size: - Virtual size: 27.1MB

UPX1
Size: 7.4MB - Virtual size: 7.4MB

.rsrc
Size: 130KB - Virtual size: 132KB