NEAS[.]f4e1e373d12a061131d533b8648ce880[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.f4e1e373d12a061131d533b8648ce880.exe
Size

7.0MB
MD5

f4e1e373d12a061131d533b8648ce880
SHA1

a86c8d6f87d2de3767642c735d772e831bdc79db
SHA256

fda3a4f1ba51eb0528c406bc94c454e28281d7d3d82c249880659222dc47a754
SHA512

12c66ee73500f3254e4cb6425462f502b13f8410c095ee648d52789f48154c3b6a43c9762049bdb196b81d73d5488bbb69fb1266a1a150294164fdd4ae0a7d17
SSDEEP

98304:jBFr1GYY6ihQXeuhAgNcpdWK07pWUd/nwdA1GUylyXE6Z2Uk/u0btp6rATIufqWn:1/7kdEQUd/nwu1GY0bToAESaFuv

Score

1^/10

Malware Config

Signatures

Files

NEAS.f4e1e373d12a061131d533b8648ce880.exe
.exe windows:6 windows x64

79b3362178937bf9559741c46bb9e035

Code Sign

4f:db:ea:21:70:f2:c1:81:44:a4:10:93:99:42:5e:77
Certificate

Issuer

CN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (10200rpm) 6072Mb 1.5 Rtl

Not Before

19-01-2023 16:03

Not After

20-01-2033 16:03

Subject

CN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (10200rpm) 6072Mb 1.5 Rtl

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:61:03:83:f8:bd:5b:74:72:d3:8d:30:04:a2:99:1a:b1:a8:72:9c:7b:f1:67:77:5e:cd:08:fd:3e:f6:ed:33
Signer

Actual PE Digest

b2:61:03:83:f8:bd:5b:74:72:d3:8d:30:04:a2:99:1a:b1:a8:72:9c:7b:f1:67:77:5e:cd:08:fd:3e:f6:ed:33

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.MPRESS1
Size: 3.8MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79b3362178937bf9559741c46bb9e035

Code Sign

4f:db:ea:21:70:f2:c1:81:44:a4:10:93:99:42:5e:77Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

b2:61:03:83:f8:bd:5b:74:72:d3:8d:30:04:a2:99:1a:b1:a8:72:9c:7b:f1:67:77:5e:cd:08:fd:3e:f6:ed:33Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.MPRESS1 Size: 3.8MB - Virtual size: 9.1MB

.MPRESS2 Size: 3KB - Virtual size: 2KB

.rsrc Size: 213KB - Virtual size: 213KB

4f:db:ea:21:70:f2:c1:81:44:a4:10:93:99:42:5e:77
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

b2:61:03:83:f8:bd:5b:74:72:d3:8d:30:04:a2:99:1a:b1:a8:72:9c:7b:f1:67:77:5e:cd:08:fd:3e:f6:ed:33
Signer

.MPRESS1
Size: 3.8MB - Virtual size: 9.1MB

.MPRESS2
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 213KB - Virtual size: 213KB