NEAS[.]d56caacd658145f34716092bdf011740[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d56caacd658145f34716092bdf011740.exe
Size

1.4MB
MD5

d56caacd658145f34716092bdf011740
SHA1

e608e4f196bfb9626ca2f43d115aad5594f7f570
SHA256

081a678c50f4a9ee99d61fe8724f4884faf73f36c0092135b80e65a454eba508
SHA512

208f19a982f97b66a54be9a1609229d8d78cb8bed4422cf629b6f57b7b801ac52aa3af7a568d19351709517ed65bec97d1d97d480589be4a8009e4d9368cf1bb
SSDEEP

24576:Ls72+2jz0J4YvNyD+kfiLMpPc0Il030nDVH9sFbwtAxGg4HKaQFr:u2+2/0J9yLqLMlcBl00DVH9sFbwixGgL

Score

1^/10

Malware Config

Signatures

Files

NEAS.d56caacd658145f34716092bdf011740.exe
.dll windows:6 windows x64

d3ac048cf86db4533f6e18cfb51c420c

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

07/03/2019, 19:35

Not After

03/03/2034, 19:35

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8e
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

25/09/2023, 17:31

Not After

24/09/2026, 17:31

Subject

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f0:4a:c4:02:b1:e1:c6:4a:f1:1d:ec:3d:ec:49:2e:76:a4:2f:12:ee:b8:17:94:98:30:ed:c3:9c:23:4e:d4:1a
Signer

Actual PE Digest

f0:4a:c4:02:b1:e1:c6:4a:f1:1d:ec:3d:ec:49:2e:76:a4:2f:12:ee:b8:17:94:98:30:ed:c3:9c:23:4e:d4:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python310

PyGILState_Ensure
PyExc_ValueError
PyImport_ImportModule
PyExc_RuntimeError
PyExc_AttributeError
PyErr_Format
_Py_Dealloc
PyModule_GetDict
PyCapsule_GetPointer
PyModule_Create2
PyObject_GetAttrString
PyCapsule_Type
PyExc_ImportError
PyErr_Print
PyErr_SetString
PyUnicode_FromString
PyDict_SetItemString
PyGILState_Release
PyOS_snprintf

kernel32

TerminateProcess
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler
memcpy

api-ms-win-crt-runtime-l1-1-0

_clearfp
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_statusfp
_initialize_onexit_table
_cexit
_execute_onexit_table
_initterm

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-math-l1-1-0

_cabs
cabsf
exp
expf
floor
log
logf
pow
sqrt
sqrtf

Exports

Exports

PyInit__umath_linalg

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 669KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ac048cf86db4533f6e18cfb51c420c

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7Certificate

Extended Key Usages

Key Usages

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8eCertificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

f0:4a:c4:02:b1:e1:c6:4a:f1:1d:ec:3d:ec:49:2e:76:a4:2f:12:ee:b8:17:94:98:30:ed:c3:9c:23:4e:d4:1aSigner

Headers

DLL Characteristics

File Characteristics

Imports

python310

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 669KB

.pdata Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 436B

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8e
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

f0:4a:c4:02:b1:e1:c6:4a:f1:1d:ec:3d:ec:49:2e:76:a4:2f:12:ee:b8:17:94:98:30:ed:c3:9c:23:4e:d4:1a
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 669KB

.pdata
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 436B