NEAS[.]d2c2738945782bebb2cab7844afac980[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d2c2738945782bebb2cab7844afac980.exe
Size

106KB
MD5

d2c2738945782bebb2cab7844afac980
SHA1

71c161b49ae99d32f89b195c9890ac82e6dc24b8
SHA256

04c15c1ccd3a1d7be8d353f41cd21a68e4a11bd1161427426d47eea47b29d429
SHA512

68b966bfb7eb7c25acbcafd90052fdc60d401301ce3dd459dec51272ab4958ff63c5aae4c88939aec3c87e04aa6ef986e9c7ab52930812bd110571825eebeff6
SSDEEP

3072:n7/HDNBImbJcCrGT6reYYYYYYYY1pXeYYYYYYYYqIhG:nB2AGu2sG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2c2738945782bebb2cab7844afac980.exe

Files

NEAS.d2c2738945782bebb2cab7844afac980.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 74KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE