NEAS[.]d2b11afdac17441e239901d07bd1ad30[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d2b11afdac17441e239901d07bd1ad30.exe
Size

2.1MB
MD5

d2b11afdac17441e239901d07bd1ad30
SHA1

5093d10cf759ca55dc90c2784486132be7e87af2
SHA256

5b21c380fd70e2fcf4e4f77520299ebcf9d7a91e82eddc3b705e20ccdc51f8b7
SHA512

426fe5b628d64958173616e3b59898a5f20e75cb2a72323e4628bc56f6a47ca9ef52bd90602e1ca9c02a8c476ab1d2ef83e249113629b81b8aa59932d32e0829
SSDEEP

49152:HlI1myPE/IalB0uzXqz5KRYex4yTGwXcfKIawc5gP6htenpMug+1:HlL8EBB5XqmYmZ/gKtLu1

Score

1^/10

Malware Config

Signatures

Files

NEAS.d2b11afdac17441e239901d07bd1ad30.exe
.dll windows:5 windows x86

e48a36a8310f0c41029c3458f83d41bb

Code Sign

33:00:00:02:24:6d:92:e5:58:ca:75:fe:78:00:00:00:00:02:24
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

31/05/2018, 17:37

Not After

29/05/2019, 17:37

Subject

CN=Microsoft Windows Kits Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:fc:78:11:83:be:ce:d4:c7:65:f0:cd:bc:0a:45:1d:b9:87:9c:8b:87:23:3b:28:fb:de:9b:72:fe:59:a0:be
Signer

Actual PE Digest

59:fc:78:11:83:be:ce:d4:c7:65:f0:cd:bc:0a:45:1d:b9:87:9c:8b:87:23:3b:28:fb:de:9b:72:fe:59:a0:be

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetupComm
GetModuleFileNameW
FileTimeToLocalFileTime
GetModuleHandleA
SetConsoleCursorPosition
SetHandleInformation
CancelIo
HeapReAlloc
GetUserDefaultLangID

user32

IsCharAlphaNumericA

comctl32

ImageList_Destroy

msvfw32

DrawDibClose

shlwapi

StrCatBuffA

gdi32

SetBkMode

mprapi

MprConfigInterfaceSetInfo

ws2_32

select

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZVqPQ
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e48a36a8310f0c41029c3458f83d41bb

Code Sign

33:00:00:02:24:6d:92:e5:58:ca:75:fe:78:00:00:00:00:02:24Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

59:fc:78:11:83:be:ce:d4:c7:65:f0:cd:bc:0a:45:1d:b9:87:9c:8b:87:23:3b:28:fb:de:9b:72:fe:59:a0:beSigner

Headers

File Characteristics

Imports

kernel32

user32

comctl32

msvfw32

shlwapi

gdi32

mprapi

ws2_32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 160KB - Virtual size: 157KB

ZVqPQ Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 24KB - Virtual size: 23KB

33:00:00:02:24:6d:92:e5:58:ca:75:fe:78:00:00:00:00:02:24
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

59:fc:78:11:83:be:ce:d4:c7:65:f0:cd:bc:0a:45:1d:b9:87:9c:8b:87:23:3b:28:fb:de:9b:72:fe:59:a0:be
Signer

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 160KB - Virtual size: 157KB

ZVqPQ
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 24KB - Virtual size: 23KB