28c2f7bb81be36f360ce86fffec25310_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28c2f7bb81be36f360ce86fffec25310_NEIKI
Size

3.6MB
MD5

28c2f7bb81be36f360ce86fffec25310
SHA1

0feaa31a81ba31fc6d425e17b1efa4fea17480d7
SHA256

ee044c04908f7661195b0a51f7f2fa34ffd4b955199b2772b2409040f854dd5c
SHA512

155ff3e830d894961777c227faedc0450a2cdf11c7f19217b240137bbba0b7bc825d6e0314c382cbbddb24560f580f05e91cb18aabd8cbf2d023bd2768e5633d
SSDEEP

98304:Ewo8B/WB4mv4DiUFKDGn1NvIAhq852jJeksKN0L/2tzv:XfI46JUF9n1NAA9MjJeksk0Cv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c2f7bb81be36f360ce86fffec25310_NEIKI

Files

28c2f7bb81be36f360ce86fffec25310_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE