NEAS[.]e5af0d717d77468c789c483553895e80[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e5af0d717d77468c789c483553895e80.exe
Size

4.3MB
MD5

e5af0d717d77468c789c483553895e80
SHA1

59f1097e94a53a3bb46ac5d6a98c8c29e61ae9fa
SHA256

21b309ef90030bb1ce465f65b0664a7eb9eaabf2269259e3390c73d8868e7324
SHA512

40f2c78ade441f21aa6094b4c459d6ec9e16a759c4e739c57de24e63fd8d40d59c14f3d1c1b9c9dcc32395190b5b03a079c5e34fae3cc352b70566528c81364d
SSDEEP

98304:a+Q5N3nUGGGNi6LQsf/yQSS0F59CV/K647fWLDwLH:a+c3U8Ni2QsyQIFY/K64TFH

Score

1^/10

Malware Config

Signatures

Files

NEAS.e5af0d717d77468c789c483553895e80.exe
.exe windows:5 windows x86

89b5bb2894fb366849cabba5e1177a1a

Code Sign

75:2e:73:8f:36:54:ff:0d
Certificate

Issuer

CN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk

Not Before

26/10/2023, 00:00

Not After

26/10/2025, 00:00

Subject

CN=Balenciaga,O=Balenciaga,C=US,1.2.840.113549.1.9.1=#0c1442616c656e63696167614063696167612e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:2e:73:8f:36:54:ff:0d
Certificate

Issuer

CN=Adler SignKey CA,O=Adler Soft Development,L=Luhansk

Not Before

26/10/2023, 00:00

Not After

26/10/2025, 00:00

Subject

CN=Balenciaga,O=Balenciaga,C=US,1.2.840.113549.1.9.1=#0c1442616c656e63696167614063696167612e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:42:07:89:1f:2b:ae:71:80:c1:d0:5b:9f:c2:ef:da:a1:06:58:f9:e7:63:2a:f7:1e:1f:02:4d:06:bf:55:90
Signer

Actual PE Digest

7d:42:07:89:1f:2b:ae:71:80:c1:d0:5b:9f:c2:ef:da:a1:06:58:f9:e7:63:2a:f7:1e:1f:02:4d:06:bf:55:90

Digest Algorithm

sha256

PE Digest Matches

true

39:52:a7:4e:43:26:2b:69:92:5a:dd:11:c4:a7:da:63:8c:90:0d:f6
Signer

Actual PE Digest

39:52:a7:4e:43:26:2b:69:92:5a:dd:11:c4:a7:da:63:8c:90:0d:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetDlgCtrlID

gdi32

Pie

ole32

CoTaskMemAlloc

oleaut32

SafeArrayGetElement

msvcrt

_initterm

version

GetFileVersionInfoSizeW

Sections

.text
Size: - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.h?T
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.O#1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;f~
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89b5bb2894fb366849cabba5e1177a1a

Code Sign

75:2e:73:8f:36:54:ff:0dCertificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

75:2e:73:8f:36:54:ff:0dCertificate

Extended Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

7d:42:07:89:1f:2b:ae:71:80:c1:d0:5b:9f:c2:ef:da:a1:06:58:f9:e7:63:2a:f7:1e:1f:02:4d:06:bf:55:90Signer

39:52:a7:4e:43:26:2b:69:92:5a:dd:11:c4:a7:da:63:8c:90:0d:f6Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

Sections

.text Size: - Virtual size: 149KB

.textbss Size: - Virtual size: 64KB

.rdata Size: - Virtual size: 324KB

.data Size: - Virtual size: 68B

.h?T Size: - Virtual size: 2.2MB

.O#1 Size: 1KB - Virtual size: 1KB

.;f~ Size: 4.3MB - Virtual size: 4.3MB

.rsrc Size: 1024B - Virtual size: 1016B

75:2e:73:8f:36:54:ff:0d
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

75:2e:73:8f:36:54:ff:0d
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

7d:42:07:89:1f:2b:ae:71:80:c1:d0:5b:9f:c2:ef:da:a1:06:58:f9:e7:63:2a:f7:1e:1f:02:4d:06:bf:55:90
Signer

39:52:a7:4e:43:26:2b:69:92:5a:dd:11:c4:a7:da:63:8c:90:0d:f6
Signer

.text
Size: - Virtual size: 149KB

.textbss
Size: - Virtual size: 64KB

.rdata
Size: - Virtual size: 324KB

.data
Size: - Virtual size: 68B

.h?T
Size: - Virtual size: 2.2MB

.O#1
Size: 1KB - Virtual size: 1KB

.;f~
Size: 4.3MB - Virtual size: 4.3MB

.rsrc
Size: 1024B - Virtual size: 1016B