NEAS[.]e126a008a908051fbe9671cd0806b8f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e126a008a908051fbe9671cd0806b8f0.exe
Size

2.0MB
MD5

e126a008a908051fbe9671cd0806b8f0
SHA1

1e61d49cb13a7953207c511eead4269513d38265
SHA256

1e7f49cfcd0e3100d373dfa9b46fd78a98911aad1af48c533f2e73055ac2fc77
SHA512

be09c3a0b89e5a1aa080c73ce0066054ba19fc481663cec34c91464e5b7186fde8002e2a402cb2442401b26ac773e719e1f2dfb84323eba52697a0298aee541e
SSDEEP

12288:3Ia6nnHT0hRi4Eu/Sko1B93OXgY0V+UL:3InARLo1qXo

Score

1^/10

Malware Config

Signatures

Files

NEAS.e126a008a908051fbe9671cd0806b8f0.exe
.dll windows:5 windows x86

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6b:71:a7:9c:80:1c:d6:54:47:83:ad:c3:5f:41:20:e9:5c:eb:dc:72
Signer

Actual PE Digest

6b:71:a7:9c:80:1c:d6:54:47:83:ad:c3:5f:41:20:e9:5c:eb:dc:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:b2:9b:00:00:00:00:00:15Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

6b:71:a7:9c:80:1c:d6:54:47:83:ad:c3:5f:41:20:e9:5c:eb:dc:72Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 512B - Virtual size: 8B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:b2:9b:00:00:00:00:00:15
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

6b:71:a7:9c:80:1c:d6:54:47:83:ad:c3:5f:41:20:e9:5c:eb:dc:72
Signer

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 512B - Virtual size: 8B