NEAS[.]aac3cf08e61cebc5360066567005ca50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aac3cf08e61cebc5360066567005ca50.exe
Size

474KB
MD5

aac3cf08e61cebc5360066567005ca50
SHA1

acfebcc2534379bd77a9e1dedf6a8428d3e4bd6b
SHA256

0a631dd90567fcd1bb8f787d2eeb278e3f5ae99bfcd27671e6ffd9b0180ee85c
SHA512

c3b7e339101e040a53d88baa6fc7a00d994d1e37033f4377f39edb82bb7b65ea23a4873bd65a848c1c3ab6e360536599d4f3b4280f71b90debdd3e70521528aa
SSDEEP

12288:mhIEswswswswswskl2uYArsff1jsKC/4oVJcJjqdU2:GYAe1AKC/tXcJ2

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aac3cf08e61cebc5360066567005ca50.exe

Files

NEAS.aac3cf08e61cebc5360066567005ca50.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE