NEAS[.]045e42eb75e79a6b7adfa5597c070f40_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.045e42eb75e79a6b7adfa5597c070f40_JC.exe
Size

566KB
MD5

045e42eb75e79a6b7adfa5597c070f40
SHA1

c7ba57f020d95c9a743742fe9f2ffb6f4e9f114e
SHA256

c55e717c9e111733daf05c42c4d24a00af5b7b19ccf65c36ea67793624631052
SHA512

b26edc65b729084193ef33174ef0a604a822ad2521509e237721be4774df60581682baeba5feac067fcd2d21ecc1e5ca213265cb2d99726f5cd1611911160c7c
SSDEEP

12288:Qw1iy3FCxztymM7Yq7wSX0z92Isv/MsP6Ax+xX+X0QrWoczL:QC2zVM7av9sLiO+F+X0QrW1zL

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.045e42eb75e79a6b7adfa5597c070f40_JC.exe

Files

NEAS.045e42eb75e79a6b7adfa5597c070f40_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 133KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 37KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 133KB - Virtual size: 312KB

DATA Size: 2KB - Virtual size: 8KB

BSS Size: - Virtual size: 3KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 4KB

.vmp0 Size: 37KB - Virtual size: 52KB

.reloc Size: - Virtual size: 24KB

.rsrc Size: 387KB - Virtual size: 412KB

.data Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

CODE
Size: 133KB - Virtual size: 312KB

DATA
Size: 2KB - Virtual size: 8KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 4KB

.vmp0
Size: 37KB - Virtual size: 52KB

.reloc
Size: - Virtual size: 24KB

.rsrc
Size: 387KB - Virtual size: 412KB

.data
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB