NEAS[.]ad0ada9922a38d53425c3be5206ce090[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ad0ada9922a38d53425c3be5206ce090.exe
Size

15KB
MD5

ad0ada9922a38d53425c3be5206ce090
SHA1

1d5862d638401dc6ddfdff8b5b1802b8b79f3ee4
SHA256

acffcd6bdfce0eb452031d0f1145f5ead335d417bbb836a2d66b7c5a025a5d94
SHA512

3338a175c918765177b22dced11aaf0ad2738cca09bcec114ec68f2af3e7d311102ab20d0dd07119244b2ceda386ed5655e3ca22db181364d8ab5988b98d1ca4
SSDEEP

384:WAOMw3zdp3bwjGjue9/0jCRrndbWsWfhWQyHRN7UuoXk5+R9zusBSW:VOMwBprwjGjue9/0jCRrndbG5uXbg9zd

Score

1^/10

Malware Config

Signatures

Files

NEAS.ad0ada9922a38d53425c3be5206ce090.exe
.dll windows:10 windows x64

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:38:da:9b:5e:c1:08:34:99:cf:7b:46:86:50:81:1e:d5:84:66:94:a4:68:67:12:81:ef:44:71:c5:ad:3d:e2
Signer

Actual PE Digest

df:38:da:9b:5e:c1:08:34:99:cf:7b:46:86:50:81:1e:d5:84:66:94:a4:68:67:12:81:ef:44:71:c5:ad:3d:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

ConvertDefaultLocale
EnumSystemGeoID
EnumSystemLocalesA
EnumSystemLocalesW
FindNLSString
FindNLSStringEx
FormatMessageA
FormatMessageW
GetACP
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetGeoInfoW
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
IdnToAscii
IdnToUnicode
IsDBCSLeadByte
IsDBCSLeadByteEx
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
IsValidNLSVersion
LCMapStringA
LCMapStringEx
LCMapStringW
LocaleNameToLCID
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetProcessPreferredUILanguages
SetThreadLocale
SetThreadPreferredUILanguages
SetThreadUILanguage
SetUserGeoID
VerLanguageNameA
VerLanguageNameW

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

df:38:da:9b:5e:c1:08:34:99:cf:7b:46:86:50:81:1e:d5:84:66:94:a4:68:67:12:81:ef:44:71:c5:ad:3d:e2Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 1008B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

df:38:da:9b:5e:c1:08:34:99:cf:7b:46:86:50:81:1e:d5:84:66:94:a4:68:67:12:81:ef:44:71:c5:ad:3d:e2
Signer

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 1008B