8432cc3869f420e6399fff714b85e7357e26abd03516d82aa369a852fb245914 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8432cc3869f420e6399fff714b85e7357e26abd03516d82aa369a852fb245914
Size

15KB
MD5

afa02f4e920cb82bfe97991e179a2eec
SHA1

45f19495e927bae8b845df9c592dd5870746cbf5
SHA256

8432cc3869f420e6399fff714b85e7357e26abd03516d82aa369a852fb245914
SHA512

668702e8714a859864c43a620ba95f35c15efa129050b7ce6d8d2b5ae3a8021a4978bf20466e1645a050a428256bb3adef5931a715c285a6ad0fdf9acfd29af1
SSDEEP

384:MRENtbEBgli5coW1G2Axwr6+Y9PffPz1u:OEN4gli5RW1Ghx3bPr1u

Score

8^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8432cc3869f420e6399fff714b85e7357e26abd03516d82aa369a852fb245914
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE