NEAS[.]75aac518e8ac754894bd18cefbbbfb10[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.75aac518e8ac754894bd18cefbbbfb10.exe
Size

2.6MB
MD5

75aac518e8ac754894bd18cefbbbfb10
SHA1

edc00b263c8b049c8a7ff49c7c17a72cb5080cd4
SHA256

3c10781ff278a4e98b0bf60ca95f58eb895fa2a8e2b65f6f2fa431e9bf128441
SHA512

6a803285cfb7dbb32bc63e1600fdae84fc1cf2dc00aa3e603a5439c8e0e0c33140d74a7c4bc6058dda96ede4c9bf69a6af228a5c50876b4164b8c09c68f61e04
SSDEEP

49152:pTUX9BwCGwOjmpd0s6wgHiW+e1Xdgx0iOsR8gP0EZ9Cjy84Hs2g:t89BFOjmAWWFtgxRDPPTA34HsJ

Score

1^/10

Malware Config

Signatures

Files

NEAS.75aac518e8ac754894bd18cefbbbfb10.exe
.dll windows:5 windows x86

e0763fbded088cbea1d90b1834e9d119

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:d5:f8:65:6f:4b:a5:07:69:d6:2e:04:3d:5f:ae:a7:bc:b8:6b:92:b1:65:32:27:f5:63:02:35:51:4e:ac:ac
Signer

Actual PE Digest

cb:d5:f8:65:6f:4b:a5:07:69:d6:2e:04:3d:5f:ae:a7:bc:b8:6b:92:b1:65:32:27:f5:63:02:35:51:4e:ac:ac

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA

msvfw32

DrawDibClose

shlwapi

StrStrW

kernel32

GetBinaryTypeA
GetModuleFileNameA
GetModuleHandleA
GetUserDefaultLangID
GetModuleFileNameW
SetComputerNameExW

user32

RegisterClassExA

mprapi

MprAdminInterfaceTransportAdd

ws2_32

select

lz32

LZCopy

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZVqPQ
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

*saxC
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0763fbded088cbea1d90b1834e9d119

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

cb:d5:f8:65:6f:4b:a5:07:69:d6:2e:04:3d:5f:ae:a7:bc:b8:6b:92:b1:65:32:27:f5:63:02:35:51:4e:ac:acSigner

Headers

File Characteristics

Imports

version

msvfw32

shlwapi

kernel32

user32

mprapi

ws2_32

lz32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 88KB - Virtual size: 88KB

ZVqPQ Size: 164KB - Virtual size: 161KB

*saxC Size: 168KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 32KB - Virtual size: 31KB

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

cb:d5:f8:65:6f:4b:a5:07:69:d6:2e:04:3d:5f:ae:a7:bc:b8:6b:92:b1:65:32:27:f5:63:02:35:51:4e:ac:ac
Signer

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 88KB - Virtual size: 88KB

ZVqPQ
Size: 164KB - Virtual size: 161KB

*saxC
Size: 168KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 32KB - Virtual size: 31KB