NEAS[.]ec2e3f230f18847e346909eb120b26c0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ec2e3f230f18847e346909eb120b26c0.exe
Size

95KB
MD5

ec2e3f230f18847e346909eb120b26c0
SHA1

de30a731d964472d8970e19b2a99dec84875df73
SHA256

37d4aed61456d59053fc4c022104c74f9c26a601ccc99edfda8d679cfa48e9f5
SHA512

0869ce7ca9f2a5d390791cbc8f42d4a3002e7e1ccecb1b899088d9cddfbc261f426fcef86f99545a5da7f2a697f036846db192ea2635e0f173a660dbea4da513
SSDEEP

1536:aBS0IzbuEYE+9z2wp+FavGmhMn+IhzZtzQ/0ZRz7CKS:aBR4buAs0FNmhMn+IhNC/0ZRz7G

Score

1^/10

Malware Config

Signatures

Files

NEAS.ec2e3f230f18847e346909eb120b26c0.exe
.exe windows:6 windows x64 arch:x64

4532ed405f27949e7a9ce4879fc06ec9

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

07/03/2019, 19:35

Not After

03/03/2034, 19:35

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8e
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

25/09/2023, 17:31

Not After

24/09/2026, 17:31

Subject

CN=Stichting Blender Foundation,O=Stichting Blender Foundation,L=Amsterdam,ST=Noord-Holland,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:06:d2:a7:97:ce:a1:23:7e:e0:9c:0e:1e:d6:c4:77:db:c1:b4:3f:b0:ae:a6:fa:c1:d7:f8:f0:11:62:54:c3
Signer

Actual PE Digest

49:06:d2:a7:97:ce:a1:23:7e:e0:9c:0e:1e:d6:c4:77:db:c1:b4:3f:b0:ae:a6:fa:c1:d7:f8:f0:11:62:54:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

python310

Py_Main

vcruntime140

__current_exception
__current_exception_context
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_cexit
terminate
_get_initial_wide_environment
_initialize_wide_environment
_initterm
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_set_app_type
_seh_filter_exe
_c_exit
__p___wargv
__p___argc
_initterm_e
_exit
_crt_atexit
exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

IsDebuggerPresent
GetModuleHandleW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentThreadId

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4532ed405f27949e7a9ce4879fc06ec9

Code Sign

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7Certificate

Extended Key Usages

Key Usages

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8eCertificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

49:06:d2:a7:97:ce:a1:23:7e:e0:9c:0e:1e:d6:c4:77:db:c1:b4:3f:b0:ae:a6:fa:c1:d7:f8:f0:11:62:54:c3Signer

Headers

DLL Characteristics

File Characteristics

Imports

python310

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 348B

.rsrc Size: 79KB - Virtual size: 78KB

.reloc Size: 512B - Virtual size: 44B

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7
Certificate

7a:3f:76:65:25:a5:be:bf:50:8f:7a:5f:0b:72:2d:8e
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

49:06:d2:a7:97:ce:a1:23:7e:e0:9c:0e:1e:d6:c4:77:db:c1:b4:3f:b0:ae:a6:fa:c1:d7:f8:f0:11:62:54:c3
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 348B

.rsrc
Size: 79KB - Virtual size: 78KB

.reloc
Size: 512B - Virtual size: 44B