NEAS[.]dec3da3f21c0546e9bde59c337fc7720[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.dec3da3f21c0546e9bde59c337fc7720.exe
Size

26KB
MD5

dec3da3f21c0546e9bde59c337fc7720
SHA1

1cb9b8aa48dbeaafb54a8551cf28055d507f69d3
SHA256

5332a7884e77dc446ea1c748a36d8ffa35f6da749d3daf4008a0400c2684cb46
SHA512

cc26012685367577acefed3bee04281b4cb9502ef08cf91e9d78dd3876492f4c1ba19ee84db165b08eb665e0b522e8e64b06f4835300a02833635f4da1e80444
SSDEEP

768:ilCzwJWXktaLIxjtAmnoE5++YdffNJvu5NR:ilCzwJWXktaLIxjtaE5+bdffNJvsL

Score

1^/10

Malware Config

Signatures

Files

NEAS.dec3da3f21c0546e9bde59c337fc7720.exe
.dll windows:4 windows x64

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:12:69:f8:3b:da:b2:c5:ee:1b:50:48:ec:08:43:55
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

02-03-2023 00:00

Not After

21-02-2024 23:59

Subject

CN=Milan Miladinovic,O=Milan Miladinovic,ST=Nišavski okrug,C=RS

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ca:e4:8a:71:a4:c2:64:91:0d:27:bb:69:09:09:2f:e1:48:e4:b2:af:6a:93:65:0b:b4:c4:27:42:85:ae:af:ff
Signer

Actual PE Digest

ca:e4:8a:71:a4:c2:64:91:0d:27:bb:69:09:09:2f:e1:48:e4:b2:af:6a:93:65:0b:b4:c4:27:42:85:ae:af:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

c1:12:69:f8:3b:da:b2:c5:ee:1b:50:48:ec:08:43:55Certificate

Extended Key Usages

Key Usages

ca:e4:8a:71:a4:c2:64:91:0d:27:bb:69:09:09:2f:e1:48:e4:b2:af:6a:93:65:0b:b4:c4:27:42:85:ae:af:ffSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 19KB - Virtual size: 19KB

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

c1:12:69:f8:3b:da:b2:c5:ee:1b:50:48:ec:08:43:55
Certificate

ca:e4:8a:71:a4:c2:64:91:0d:27:bb:69:09:09:2f:e1:48:e4:b2:af:6a:93:65:0b:b4:c4:27:42:85:ae:af:ff
Signer

.text
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 512B - Virtual size: 12B