NEAS[.]55883d797fb0da69263e6994dd0debf0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.55883d797fb0da69263e6994dd0debf0_JC.exe
Size

73KB
MD5

55883d797fb0da69263e6994dd0debf0
SHA1

27930f486a5932494bdd002f43529ad38df1a38a
SHA256

8f5c2e9e88061840ba5daf15b9cfba83b9e7383dfc4376c40e15ec6088f93c10
SHA512

00aeda8e8f6c67a0404ca4e72b7ee1db7de08771c261738128fc3d428835f23626af958e3eaaec3b3baf3d3cc064c69fe684d57b1947af81b36323d926d9e0f2
SSDEEP

1536:O/rMVjdh0PV58/DGhe0lRHq1oYDYBxR7S:EWjjm58/KhJH5oYhS

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.55883d797fb0da69263e6994dd0debf0_JC.exe

Files

NEAS.55883d797fb0da69263e6994dd0debf0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MJ0011
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE