dae529543ad2b21011b03984343d95f5ca196cc83645820878047a4f3670ebf6

Sharing

Copy URL Twitter E-mail

General

Target

dae529543ad2b21011b03984343d95f5ca196cc83645820878047a4f3670ebf6
Size

3.3MB
MD5

0384fa1e1caaaee71e043814c336abf2
SHA1

ff952738630d6d68ca266b04dba1ab93a954a1a1
SHA256

dae529543ad2b21011b03984343d95f5ca196cc83645820878047a4f3670ebf6
SHA512

2def13b601a207d677da70db3fd7bd577e5d680960b2057025a0acfdc48401b37e4b14135593f6e0be6b913f42f4ec96d0a7e0fb328d407f309ab77695dd25c2
SSDEEP

49152:aaSbfjXqkI6nrJBoNIdRp7rHWQ+o0b0kXCn+n5jMQXgNQmMeZwC0oWkoagrr+zN:aBP1nvo2dP6m+6QXgNQmVZuooaLi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dae529543ad2b21011b03984343d95f5ca196cc83645820878047a4f3670ebf6

Files

dae529543ad2b21011b03984343d95f5ca196cc83645820878047a4f3670ebf6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 75KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 15.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 2.0MB - Virtual size: 7.0MB

DATA Size: 75KB - Virtual size: 164KB

BSS Size: 1024B - Virtual size: 208KB

.idata Size: 5KB - Virtual size: 16KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 540KB

.rsrc Size: 1.1MB - Virtual size: 15.7MB

.aspack Size: 7KB - Virtual size: 16KB

.aspack Size: 15KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

CODE
Size: 2.0MB - Virtual size: 7.0MB

DATA
Size: 75KB - Virtual size: 164KB

BSS
Size: 1024B - Virtual size: 208KB

.idata
Size: 5KB - Virtual size: 16KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 540KB

.rsrc
Size: 1.1MB - Virtual size: 15.7MB

.aspack
Size: 7KB - Virtual size: 16KB

.aspack
Size: 15KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB