NEAS[.]4350183ae12f6a0e2454f7e08188da70_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4350183ae12f6a0e2454f7e08188da70_JC.exe
Size

19KB
MD5

4350183ae12f6a0e2454f7e08188da70
SHA1

a47fe2316ccd2fb9f1533070794612a2234740bc
SHA256

432529cc27679fce665b81e8c26d3708738824a47cbf6ab7d0d5dfaf85fee2e3
SHA512

8d86081728927eb4cf88e4518f9eec7a7c322fed6db884a0df441692c838997113dffbf6fdba37edf6183222d43b0f78187e278a6ecba3440a5b4eb026ee9b45
SSDEEP

384:9Bf5WEhW23szm0GftpBj5qoYaQHRN7vlmT4F9:/f5Z8zViiTLP

Score

1^/10

Malware Config

Signatures

Files

NEAS.4350183ae12f6a0e2454f7e08188da70_JC.exe
.dll windows:10 windows x64

Code Sign

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/10/2017, 22:57

Not After

02/01/2019, 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:4b:91:11:5f:03:0b:96:d9:c8:b2:4d:90:5c:f0:f4:16:98:fc:6f:6a:aa:f7:f6:2b:48:18:d9:f9:1e:5c:cc
Signer

Actual PE Digest

a8:4b:91:11:5f:03:0b:96:d9:c8:b2:4d:90:5c:f0:f4:16:98:fc:6f:6a:aa:f7:f6:2b:48:18:d9:f9:1e:5c:cc

Digest Algorithm

sha256

PE Digest Matches

true

74:7f:bc:8d:bd:d6:d9:62:2d:5b:61:42:b4:fd:49:e6:2e:8f:e2:c3
Signer

Actual PE Digest

74:7f:bc:8d:bd:d6:d9:62:2d:5b:61:42:b4:fd:49:e6:2e:8f:e2:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

_abs64
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_lfind
_lfind_s
_lrotl
_lrotr
_lsearch
_lsearch_s
_rotl
_rotl64
_rotr
_rotr64
_swab
abs
bsearch
bsearch_s
div
imaxabs
imaxdiv
labs
ldiv
llabs
lldiv
qsort
qsort_s
rand
rand_s
srand

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8Certificate

Extended Key Usages

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a8:4b:91:11:5f:03:0b:96:d9:c8:b2:4d:90:5c:f0:f4:16:98:fc:6f:6a:aa:f7:f6:2b:48:18:d9:f9:1e:5c:ccSigner

74:7f:bc:8d:bd:d6:d9:62:2d:5b:61:42:b4:fd:49:e6:2e:8f:e2:c3Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1016B

33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a8:4b:91:11:5f:03:0b:96:d9:c8:b2:4d:90:5c:f0:f4:16:98:fc:6f:6a:aa:f7:f6:2b:48:18:d9:f9:1e:5c:cc
Signer

74:7f:bc:8d:bd:d6:d9:62:2d:5b:61:42:b4:fd:49:e6:2e:8f:e2:c3
Signer

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1016B