d175aa24c06accff348ccd15313fb983826cd7e6c87875a66ffc91c68083ae8a | Triage

Sharing

General

Target

d175aa24c06accff348ccd15313fb983826cd7e6c87875a66ffc91c68083ae8a
Size

739KB
MD5

a953ae698a1435515b00eb41be96384e
SHA1

635e5580eeb0507450e36f5d821adccac1cc2d2c
SHA256

d175aa24c06accff348ccd15313fb983826cd7e6c87875a66ffc91c68083ae8a
SHA512

a96a5491d01362d4d5031a32574664b0bc3dc813a9be9f2addf50ceab5aecc7ea3ee2ee25a1605ce94c5ef6238701a03549644ed326cf2b3f299fdf291c7ab65
SSDEEP

12288:fnF4QZth68k2PiEYlJE8ZblbK/uxMdSneGoRWf5geGzDNqcJ1CwoZznZeKk9tkxt:fnqQZtpk2Piv5zO/3dSnQWf55GfNqcTC

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d175aa24c06accff348ccd15313fb983826cd7e6c87875a66ffc91c68083ae8a

Files

d175aa24c06accff348ccd15313fb983826cd7e6c87875a66ffc91c68083ae8a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 379KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 284KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE