5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b | Triage

Sharing

General

Target

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b
Size

371KB
MD5

d72e532fdc12ccc84404f1446babd206
SHA1

f8543f1a939a2891b8f41c6ebcb732dbab06ed08
SHA256

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b
SHA512

4db68ffab69eb0b05752a38690356b9cdeb7ec9bacb743f4fd37ea0f87d7902c6677e899a3442a90d7d83df58430e40ea96b6f872ed1800b13f080c671327206
SSDEEP

6144:zNZoPdEMurlEFS7odz56lPbRSPkSNGi9KNLTseUhLMXOjtaOVLUhCUojOQ6:5Z4dE1Ewo5+SPkSNh9OTsez+joOVBUoK

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b

Files

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 355KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE