NEAS[.]0972ee381a9b883fbd6bc8f9f9be11d0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.0972ee381a9b883fbd6bc8f9f9be11d0.exe
Size

179KB
MD5

0972ee381a9b883fbd6bc8f9f9be11d0
SHA1

abf7d0db3da63bda418d4969a0cca8af924b6229
SHA256

876d55d9312ca0dd960b007799796d84259053c0ab0fc8c9cbf32b522481deed
SHA512

eb9a7b6038a55ad097f913c7a64199e941f632af8fa720e45b8dac44e8432cf9edf284acff1485b2ff13e1f1844f4709c0088e4438701785604bf25bdf8dca52
SSDEEP

3072:10z+eliaNofN4JI2rNminJOVtaEiqTPAmgAgfXXXXXXuh2OBpz:1G+2NofN422ZmtguPbgHfXXXXXXAn7

Score

1^/10

Malware Config

Signatures

Files

NEAS.0972ee381a9b883fbd6bc8f9f9be11d0.exe
.exe windows:6 windows x64

Code Sign

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-05-2022 20:47

Not After

11-05-2023 20:47

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-05-2022 20:46

Not After

11-05-2023 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9
Signer

Actual PE Digest

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9

Digest Algorithm

sha256

PE Digest Matches

true

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9
Signer

Actual PE Digest

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 416B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9Signer

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 1024B - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 2KB

.didat Size: 1024B - Virtual size: 552B

.c2r Size: 512B - Virtual size: 416B

.rsrc Size: 97KB - Virtual size: 96KB

.reloc Size: 512B - Virtual size: 364B

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cf
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9
Signer

67:7f:6c:d1:76:12:3f:d4:e2:55:b2:c8:8e:73:17:c5:7f:af:2c:c3:37:ab:1b:9d:95:fb:54:e4:6b:a0:45:e9
Signer

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 1024B - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 2KB

.didat
Size: 1024B - Virtual size: 552B

.c2r
Size: 512B - Virtual size: 416B

.rsrc
Size: 97KB - Virtual size: 96KB

.reloc
Size: 512B - Virtual size: 364B