NEAS[.]376361c0031fddb5a2e8b4bb4a77d970[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.376361c0031fddb5a2e8b4bb4a77d970.exe
Size

1.1MB
MD5

376361c0031fddb5a2e8b4bb4a77d970
SHA1

ad1f6f547a4ddd5055f3d58489401c2c74dda1ae
SHA256

be5ab28428ee1793f2971693e80f571ac6afe8efd45082761548c6dce9cb5bb6
SHA512

97579c88e613c38d2ec83415f8c3ad19e4c949b1764dde7512bdeb8636dd224be8dc064a5e1e88b656577d018d4acc13f884730d54076f762acffb16217c2eb4
SSDEEP

24576:ETKkBaumSHinmlK5dwhiZZ/Ewn8Mc5PVHaG917ScMeNRk5dVhWHWP:mKxssgYZZbYHHaq1mMHW

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.376361c0031fddb5a2e8b4bb4a77d970.exe

Files

NEAS.376361c0031fddb5a2e8b4bb4a77d970.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE