224685ff574665ae9c2a0d085cd51d08d04546df73a760243c4e84b667052d77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

224685ff574665ae9c2a0d085cd51d08d04546df73a760243c4e84b667052d77
Size

379KB
MD5

19cde67727fb0f7363dc82bd8291832f
SHA1

c939cdde9eb8b529b32074744b202aef719eff37
SHA256

224685ff574665ae9c2a0d085cd51d08d04546df73a760243c4e84b667052d77
SHA512

20e79b1a4c987c128c676032e6139a68efa9d84a3c2e7cb1e0ce8892612d3af10c903ed61c4bf7f4d707086a98b3573af0d8c774a0ba5a160a0eedb09549867f
SSDEEP

6144:iKi/VXdtA4F2LYDkkEj6oksFGI9bVCClWfPBJfVUCqpY8SgcvAW7HKxOXK95:lCq02LYVs6aD9b8CwfiCqpYBnAOQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
224685ff574665ae9c2a0d085cd51d08d04546df73a760243c4e84b667052d77

Files

224685ff574665ae9c2a0d085cd51d08d04546df73a760243c4e84b667052d77
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 309KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE