NEAS[.]3e9174b954bd7781926e76c0597f62b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3e9174b954bd7781926e76c0597f62b0_JC.exe
Size

295KB
MD5

3e9174b954bd7781926e76c0597f62b0
SHA1

c0cefa79b5d01d500b852d6fc8d55dd8d2dafb05
SHA256

0caede8a9ce754c0b686e729258b68c09e9b1a38d0cf8c9e1f0d10615f64c247
SHA512

5386d40820fba3fde3971eff09718e775e8bdbb82983f68fb91b4a54bc6098b05033d4c2b8ee8e60c1739337e63a37b30aaf579bdae1f37fe93669109d37e19e
SSDEEP

6144:LG7s7DdOhqaCLyP0zP3Ch6IdPvtokConUMhwZS393JW7eth:pndOeiQP3U6ITC4UMhC+iA

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3e9174b954bd7781926e76c0597f62b0_JC.exe

Files

NEAS.3e9174b954bd7781926e76c0597f62b0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 94KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDFGE
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE