NEAS[.]031f62604b0471bc072ff4e8ee67d190[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.031f62604b0471bc072ff4e8ee67d190.exe
Size

22KB
MD5

031f62604b0471bc072ff4e8ee67d190
SHA1

438dbe32440acf4d8f176a5ff419dd331ced00ef
SHA256

2a0670324b0efe3a3e0a4d3421ae14dfda0509a99d056f7bad90fc623b6d9ca2
SHA512

a86263136ee6690b8f1a1d51a2aba5046f3dcf970b46ccaea2aa9fc1c49ab638b8a1d8902bff4a51d56da371a22bbc6045f731d397b5700bb530501f99aa72df
SSDEEP

384:udKvlTyAdSDDi7FRbl6UmEF55dSDDi7FR6lpfm0l7H1h:v+AsDDi/T955sDDi/et7T

Score

1^/10

Malware Config

Signatures

Files

NEAS.031f62604b0471bc072ff4e8ee67d190.exe
.dll windows:4 windows x64

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed
Signer

Actual PE Digest

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed

Digest Algorithm

sha256

PE Digest Matches

true

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed
Signer

Actual PE Digest

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2dCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2dCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:edSigner

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:edSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed
Signer

26:8d:71:02:59:a1:3f:0c:bd:08:d2:54:62:bf:c5:44:a0:07:d5:65:35:aa:2c:69:69:1b:68:94:a9:3d:99:ed
Signer

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 512B - Virtual size: 12B