NEAS[.]88e2ab339c551dcea90fa096f176c200[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.88e2ab339c551dcea90fa096f176c200.exe
Size

3.0MB
MD5

88e2ab339c551dcea90fa096f176c200
SHA1

a30a5f86d4b5c8a416440a6dc498b6c30e3824d8
SHA256

0ac33ae1fe2575b0b7e4b285bb9fab9fd3c8c30f8f3349eb6c593d80dd5e4e0d
SHA512

0a95d3638d69deedea1c62e1a30381ead5ee868f135bb9164e3f3816cecc564b909c984fff9a5d1c5dfb65c0efeba2f93b099cac3fa07c8eab9c3d746938b014
SSDEEP

49152:ILXp8/02rIeWI3H5nFbe96MN5iPAESOohtc+ZXrGxYhuzeSSuoXn3:IL58ck537bhUiPAEzo77Z729eSP

Score

1^/10

Malware Config

Signatures

Files

NEAS.88e2ab339c551dcea90fa096f176c200.exe
.dll windows:5 windows x86

b1b0d89dbba00e06ab86cde2ef9f7b00

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:3b:c0:49:f8:43:fe:b2:22:57:ec:d3:8c:c7:22:36:ce:16:8f:d9:aa:72:a1:20:28:cf:06:8d:23:ed:1b:b7
Signer

Actual PE Digest

05:3b:c0:49:f8:43:fe:b2:22:57:ec:d3:8c:c7:22:36:ce:16:8f:d9:aa:72:a1:20:28:cf:06:8d:23:ed:1b:b7

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lz32

LZClose

ws2_32

select

user32

DlgDirSelectExA

kernel32

GetUserDefaultLangID
GetModuleFileNameA
GetBinaryTypeA
GetModuleFileNameW
GetModuleHandleA
SetConsoleActiveScreenBuffer

shell32

SHParseDisplayName

version

GetFileVersionInfoA

mprapi

MprConfigInterfaceTransportGetHandle

msvfw32

DrawDibSetPalette

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZVqPQ
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

*saxC
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1b0d89dbba00e06ab86cde2ef9f7b00

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

05:3b:c0:49:f8:43:fe:b2:22:57:ec:d3:8c:c7:22:36:ce:16:8f:d9:aa:72:a1:20:28:cf:06:8d:23:ed:1b:b7Signer

Headers

File Characteristics

Imports

lz32

ws2_32

user32

kernel32

shell32

version

mprapi

msvfw32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 196KB - Virtual size: 196KB

ZVqPQ Size: 180KB - Virtual size: 176KB

*saxC Size: 184KB - Virtual size: 181KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 64KB - Virtual size: 61KB

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

05:3b:c0:49:f8:43:fe:b2:22:57:ec:d3:8c:c7:22:36:ce:16:8f:d9:aa:72:a1:20:28:cf:06:8d:23:ed:1b:b7
Signer

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 196KB - Virtual size: 196KB

ZVqPQ
Size: 180KB - Virtual size: 176KB

*saxC
Size: 184KB - Virtual size: 181KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 64KB - Virtual size: 61KB