8035240743325184bd8cd2a241a52ebd794dbd0fbacc17783a305c3aec495814 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8035240743325184bd8cd2a241a52ebd794dbd0fbacc17783a305c3aec495814
Size

316KB
MD5

c8b7cb148e9d6d652cbc81517c938f62
SHA1

fdf2b96531970048f6119674d0223bc8008b6c93
SHA256

8035240743325184bd8cd2a241a52ebd794dbd0fbacc17783a305c3aec495814
SHA512

15b7718038d9d2c827132dafde7418e0087fd8877e475d4a1d8f535bb1938f704e6eaf75f824c0d8ce544ac1b384bf6ebb92222d2a1cfd3b1b64051b26a20ac2
SSDEEP

6144:i0lHqfPThEfxNu2R00q+WzZlijrBkQpZpa7bp2L5DKTz6nR9869pK8j9jMr9j4UV:iEqnTQxNu2yV+1nBZTcK5Dsz6nR9869i

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8035240743325184bd8cd2a241a52ebd794dbd0fbacc17783a305c3aec495814

Files

8035240743325184bd8cd2a241a52ebd794dbd0fbacc17783a305c3aec495814
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 242KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE