NEAS[.]13e64bcd7f0fe543bdd7fd9f925f5d20_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.13e64bcd7f0fe543bdd7fd9f925f5d20_JC.exe
Size

6.4MB
MD5

13e64bcd7f0fe543bdd7fd9f925f5d20
SHA1

d25c0301e00309e1a3acde9e2b9a73a5ab6b6389
SHA256

99b50f29b8d1b7220bf7956d02acb576d662f757120416f9b0877ec8382f437f
SHA512

f32ecc2a8b5af7affeba5f4f34b69fed19a0d5b4faa2130042247d683086643d0fffe60d065072f14df295160b49458f0e76aeb6ebf0c8e95f117e2341ad34e1
SSDEEP

196608:LCzNA7rlvRz1rrFBV6tpjuj6gYPKHCKs:LjUtYj6gYPY

Score

1^/10

Malware Config

Signatures

Files

NEAS.13e64bcd7f0fe543bdd7fd9f925f5d20_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:fb:45:d9:f7:0b:55:29:03:60:97:b4:f4:e1:43:70
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30/03/2018, 00:00

Not After

14/04/2021, 12:00

Subject

CN=Chocolatey Software\, Inc.,O=Chocolatey Software\, Inc.,L=Topeka,ST=Kansas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:77:89:24:ff:b6:c3:ac:35:7f:50:5b:ca:0d:58:b3:fe:19:e8:3e
Signer

Actual PE Digest

03:77:89:24:ff:b6:c3:ac:35:7f:50:5b:ca:0d:58:b3:fe:19:e8:3e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

07:fb:45:d9:f7:0b:55:29:03:60:97:b4:f4:e1:43:70Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

03:77:89:24:ff:b6:c3:ac:35:7f:50:5b:ca:0d:58:b3:fe:19:e8:3eSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 6.3MB - Virtual size: 6.3MB

.rsrc Size: 114KB - Virtual size: 114KB

.reloc Size: 512B - Virtual size: 12B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

07:fb:45:d9:f7:0b:55:29:03:60:97:b4:f4:e1:43:70
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

03:77:89:24:ff:b6:c3:ac:35:7f:50:5b:ca:0d:58:b3:fe:19:e8:3e
Signer

.text
Size: 6.3MB - Virtual size: 6.3MB

.rsrc
Size: 114KB - Virtual size: 114KB

.reloc
Size: 512B - Virtual size: 12B