NEAS[.]1d4cc81ce21f32da4331c4c6a7054cd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1d4cc81ce21f32da4331c4c6a7054cd0.exe
Size

99KB
MD5

1d4cc81ce21f32da4331c4c6a7054cd0
SHA1

be034180aeb8a09f4bff9a0485ccb075eba9576c
SHA256

1d6b6d85be8dea9452519ccda6a538fd9682b49a37b3c15a59c6c638741d7abd
SHA512

c2382bff40d752c7716e77f0b2992370e24ddc8fdaaa9f306013e04e5ab56ce080ed0d4a4c3fe4041ce0494df3c8ff025da1b9a1e880591576d29ed685f4ea13
SSDEEP

1536:OaYQxWlDtiw/L+9bwyW/pl6gQ+bfSgTrnaMGtlUtilt81tdv:1YFk9/Whl9btHaUtilt81X

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1d4cc81ce21f32da4331c4c6a7054cd0.exe

Files

NEAS.1d4cc81ce21f32da4331c4c6a7054cd0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ