0374847-0118[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0374847-0118.zip
Size

781KB
MD5

31cbe7e4f612663fd1575035f28b6326
SHA1

a1133f2b26b54784bc7624ae4a30cfcec1131115
SHA256

a494b9fc18f06ee8030760b85d76d15f576dda321244e00e2a2b60d6f88c3dd1
SHA512

5ad360464ca0c555d634371a7b3deba785eec08f62227217207b61a09aca3c0a906bfb14d8b7ee11ff4c5690c1a64e145718df0ad93dc503a510dd0280394ab5
SSDEEP

12288:irHPzhAuxNG84IR9aVjaMs8h9rB3ilxmyYtoz7+W1wnXQiGkeDGt58uHOCVaEZif:qL/4n2MhSmLcxqXHeD6jHOj7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/03748470-0118.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/03748470-0118.exe

Files

0374847-0118.zip
.zip
03748470-0118.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 331KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 348KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE