NEAS[.]8264982913029951d6da2b85d176a240[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8264982913029951d6da2b85d176a240.exe
Size

21KB
MD5

8264982913029951d6da2b85d176a240
SHA1

b7a3047ff55e72daec28cc5fcae631cf36fa22cd
SHA256

b9b4cceda8b41a9b2cdfd39e7496e97c2938363fa71c09fc243421ccd4f856a0
SHA512

093458eddb2b07617e4254836ac60d79476a85a037893d13ee1751104ffb51b65a8619305d93d056d8665a5fd1117022bb7366eb42cff88f76cf283110cc0c92
SSDEEP

192:X8yWvhWnWX1a1Bd0VWQ42WihdIruC1/or7o0X01k9z3AI7Dv:XtWvhWQ8d0nfIR1Z0R9zP7D

Score

1^/10

Malware Config

Signatures

Files

NEAS.8264982913029951d6da2b85d176a240.exe
.dll windows:10 windows x64

Code Sign

33:00:00:04:24:2a:2c:31:dc:36:18:25:58:00:00:00:00:04:24
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:87:a4:88:6c:c0:f4:61:d8:3c:b9:ff:1c:ed:0d:d3:b9:14:09:b2:de:de:5e:93:cd:41:5e:72:dd:b1:08:a4
Signer

Actual PE Digest

0c:87:a4:88:6c:c0:f4:61:d8:3c:b9:ff:1c:ed:0d:d3:b9:14:09:b2:de:de:5e:93:cd:41:5e:72:dd:b1:08:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:24:2a:2c:31:dc:36:18:25:58:00:00:00:00:04:24Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

0c:87:a4:88:6c:c0:f4:61:d8:3c:b9:ff:1c:ed:0d:d3:b9:14:09:b2:de:de:5e:93:cd:41:5e:72:dd:b1:08:a4Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 4KB - Virtual size: 1KB

.data Size: - Virtual size: 128B

.rsrc Size: 4KB - Virtual size: 1008B

33:00:00:04:24:2a:2c:31:dc:36:18:25:58:00:00:00:00:04:24
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

0c:87:a4:88:6c:c0:f4:61:d8:3c:b9:ff:1c:ed:0d:d3:b9:14:09:b2:de:de:5e:93:cd:41:5e:72:dd:b1:08:a4
Signer

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: - Virtual size: 128B

.rsrc
Size: 4KB - Virtual size: 1008B