NEAS[.]4e913271c674e4ae2eb0355aec166790[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4e913271c674e4ae2eb0355aec166790.exe
Size

4.1MB
MD5

4e913271c674e4ae2eb0355aec166790
SHA1

86622a7d8291b603c94380c556e4c6818cfd0e4a
SHA256

d90dc6dc85811858670331bcd46714f685ecb71bfd2c455eff171c236dca4828
SHA512

01a9df699f1687abb549a529497dd12755e6e0f267f63a40a5fb9d861fa63170807d844518e6bc33cd71227a1f47351ee33222409d8b9549b5a7e38022fcf61c
SSDEEP

98304:aR95M4DVp7vhQJI5rW2SvQYTQid95tUia+E6AQ0m6GMmYFbnOD:OnDxp7JMErfU3qi8gy11nOD

Score

1^/10

Malware Config

Signatures

Files

NEAS.4e913271c674e4ae2eb0355aec166790.exe
.exe windows:5 windows x86

a0f8b70c2bc21515b1abffdc2518b94f

Code Sign

5b:ec:1b:21:31:d6:34:8a:a9:74:84:b6:3a:e9:f4:f9
Certificate

Issuer

CN=522036264b3c07530c0910253d36220330152b1b14292e1a512d092b0b3746071333,POSTALCODE=10823,ST=0b1c1115005f5c4e010b00161801040700070818064b0c1a02+ST=0b1c1115494a5c031c0b02081a1750475310151f070b57051217441d47031d1512195d501615110b570d0a17550b1209150a45131d1315075a001044160a055b0c0b0a070b

Not Before

19/10/2023, 15:18

Not After

18/10/2024, 15:18

Subject

CN=522036264b3c07530c0910253d36220330152b1b14292e1a512d092b0b3746071333,POSTALCODE=10823,ST=0b1c1115005f5c4e010b00161801040700070818064b0c1a02+ST=0b1c1115494a5c031c0b02081a1750475310151f070b57051217441d47031d1512195d501615110b570d0a17550b1209150a45131d1315075a001044160a055b0c0b0a070b

ea:a8:e5:4f:57:3f:a3:3d:10:2d:72:b9:c8:99:57:d7:f0:4c:a0:24:5a:34:f7:d7:6f:54:09:6d:4c:9d:19:58
Signer

Actual PE Digest

ea:a8:e5:4f:57:3f:a3:3d:10:2d:72:b9:c8:99:57:d7:f0:4c:a0:24:5a:34:f7:d7:6f:54:09:6d:4c:9d:19:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesA
UpdateResourceA
DeleteVolumeMountPointA
SetConsoleTextAttribute
GetCommState
GetConsoleAliasA
WriteConsoleInputA
FindCloseChangeNotification
CreateHardLinkA
GetTickCount
GetWindowsDirectoryA
GetDateFormatA
GetPriorityClass
WideCharToMultiByte
LoadLibraryW
FreeConsole
GetSystemWindowsDirectoryA
GetConsoleAliasExesLengthW
EnumSystemCodePagesA
GetNamedPipeInfo
FileTimeToSystemTime
SetComputerNameExW
GetVolumePathNameA
GetConsoleAliasesW
InterlockedExchange
GetModuleHandleExA
GetLastError
SetLastError
BackupRead
GetProcAddress
VirtualAlloc
PeekConsoleInputW
RemoveDirectoryA
LocalAlloc
GetNumberFormatW
FoldStringW
GetOEMCP
FreeEnvironmentStringsW
VirtualProtect
SetCalendarInfoA
GlobalAddAtomW
AddConsoleAliasA
SetFileAttributesW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
PeekNamedPipe
FindFirstFileW
FillConsoleOutputCharacterW
FindResourceA
WriteConsoleA
CloseHandle
FlushFileBuffers
HeapFree
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapAlloc
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
MultiByteToWideChar
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA
RtlUnwind
SetStdHandle
GetConsoleCP
GetConsoleMode

user32

CharToOemBuffW
LoadMenuA
GetWindowTextLengthW
ChangeDisplaySettingsW

gdi32

GetCharWidthA
GetCharABCWidthsFloatA
GetBitmapDimensionEx

winhttp

WinHttpReadData
WinHttpOpen

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 986KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0f8b70c2bc21515b1abffdc2518b94f

Code Sign

5b:ec:1b:21:31:d6:34:8a:a9:74:84:b6:3a:e9:f4:f9Certificate

ea:a8:e5:4f:57:3f:a3:3d:10:2d:72:b9:c8:99:57:d7:f0:4c:a0:24:5a:34:f7:d7:6f:54:09:6d:4c:9d:19:58Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winhttp

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.data Size: 7KB - Virtual size: 986KB

.rsrc Size: 69KB - Virtual size: 4.1MB

.reloc Size: 18KB - Virtual size: 18KB

5b:ec:1b:21:31:d6:34:8a:a9:74:84:b6:3a:e9:f4:f9
Certificate

ea:a8:e5:4f:57:3f:a3:3d:10:2d:72:b9:c8:99:57:d7:f0:4c:a0:24:5a:34:f7:d7:6f:54:09:6d:4c:9d:19:58
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.data
Size: 7KB - Virtual size: 986KB

.rsrc
Size: 69KB - Virtual size: 4.1MB

.reloc
Size: 18KB - Virtual size: 18KB