NEAS[.]18bfa4fdcf24c403740b89b158152e90[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.18bfa4fdcf24c403740b89b158152e90.exe
Size

11KB
MD5

18bfa4fdcf24c403740b89b158152e90
SHA1

841cb14b0bd5dac30dfe110ab83fd70d88be9748
SHA256

4cd07dd64767c324bfe441546eadc25a5dfe210fe7f2a62f3180eb77a3d44982
SHA512

f9435c87571dc48895c5dccfc4a7a6105e0c79f2567638e014df2053cbdaa17c92970f8f06aebf356ddb6405094eedaceac31ff8d3da7f3011cba8f7b59e0f56
SSDEEP

192:6Wn3W1GQtkYjyzTbPDBQABJragoOqnajd2sit9e3l:6Wn3W1GQtjmzDBRJraQl696l

Score

1^/10

Malware Config

Signatures

Files

NEAS.18bfa4fdcf24c403740b89b158152e90.exe
.dll windows:10 windows x64

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:23

Not After

11/08/2018, 20:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:ca:33:6e:97:c5:89:22:81:c3:02:61:dc:0a:91:ad:fb:e0:41:ca:63:0c:9b:04:31:90:60:31:d9:2e:ba:5d
Signer

Actual PE Digest

fe:ca:33:6e:97:c5:89:22:81:c3:02:61:dc:0a:91:ad:fb:e0:41:ca:63:0c:9b:04:31:90:60:31:d9:2e:ba:5d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

fe:ca:33:6e:97:c5:89:22:81:c3:02:61:dc:0a:91:ad:fb:e0:41:ca:63:0c:9b:04:31:90:60:31:d9:2e:ba:5dSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 176B

.rsrc Size: 2KB - Virtual size: 1KB

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

fe:ca:33:6e:97:c5:89:22:81:c3:02:61:dc:0a:91:ad:fb:e0:41:ca:63:0c:9b:04:31:90:60:31:d9:2e:ba:5d
Signer

.rdata
Size: 512B - Virtual size: 176B

.rsrc
Size: 2KB - Virtual size: 1KB