NEAS[.]c6e4cf036d690ccd62e2db103947ff40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6e4cf036d690ccd62e2db103947ff40_JC.exe
Size

35KB
MD5

c6e4cf036d690ccd62e2db103947ff40
SHA1

36323436219c0a2f361e7d20f4774e49aa9fd1f6
SHA256

8bfed148308bc8eae41dc8ec7b4520c85774454ae5a7719dcfa60d370a048ccb
SHA512

bfa320a43762f2d7c7ffb46a206e20e528b68f26c11acebaa5dd1d6f1d89971a1229d31de38b379d7674ae7c4a7280b9737bd50898818866e5c2f697fa5b0eb3
SSDEEP

384:Fp8EC968OQ8YZJ+qZO+15Ju99QW6hQ9t4paHEiaT/mhS2696RCoVpfAxPr6+e9PN:zO9/FI6H1z8QWDeup69+CoVCxeha5tW

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6e4cf036d690ccd62e2db103947ff40_JC.exe

Files

NEAS.c6e4cf036d690ccd62e2db103947ff40_JC.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

PAN_BeginFile_DLL
PAN_EndFile_DLL
PAN_FinalizeFile_DLL
PAN_Identify_DLL
PAN_ProcessFile_DLL
PAN_QueryFile_DLL
PAN_TerminateFile_DLL

Sections

.text
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.phoed
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE