NEAS[.]7ae6b998cb8719f532c649b9b11f1515fe59e8de842107bd8009e987ee2642db_JC[.]exe | Triage

Sharing

General

Target

NEAS.7ae6b998cb8719f532c649b9b11f1515fe59e8de842107bd8009e987ee2642db_JC.exe
Size

2.3MB
MD5

046191f0a2b5745da3180da422ce9f2b
SHA1

d96ae9c138fe3f05ec7f2fc249c39b936c79efa5
SHA256

7ae6b998cb8719f532c649b9b11f1515fe59e8de842107bd8009e987ee2642db
SHA512

312fd753397f38df21badb38d87311da6b7475ab12edf87c428cea3c184fb227da133d71b0c2183eaf27fe0e210ec12709a3c5a5658e189351f006f6624b59ea
SSDEEP

49152:Q7FyrKe0TBMsGwYa+m366ipLmfvPcutdovL+XjufUuge0DZoNX:oMrKvCsv+q66eKf8utdoqzuMuodCX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7ae6b998cb8719f532c649b9b11f1515fe59e8de842107bd8009e987ee2642db_JC.exe

Files

NEAS.7ae6b998cb8719f532c649b9b11f1515fe59e8de842107bd8009e987ee2642db_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 697KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.5MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE