NEAS[.]c80ae44dba6c211451c2c948f7cf6360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c80ae44dba6c211451c2c948f7cf6360.exe
Size

38KB
MD5

c80ae44dba6c211451c2c948f7cf6360
SHA1

f43a634401dcdf03bc9953658e38f976932f23f2
SHA256

063c405f7523de128cd29353b46f236992f5ab07ea2cab17a6e60e5d9a387ab6
SHA512

b73494a6720bfba83d3110723d28806f6e28a28a076f343d596bae97b62721841959131d1a22c4ecaa62e18b76ab71ed690e9fb046e6a5a71547ef7697cbfcb7
SSDEEP

768:5bbx69+4BZKaFVekvNUZGmxCj3Dp4hqt6xfP1jD27fp:5x6rjBUZwV4hqtQfP1jaDp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c80ae44dba6c211451c2c948f7cf6360.exe

Files

NEAS.c80ae44dba6c211451c2c948f7cf6360.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE