b7e09b188345f4b1e6eafb8dc171c0c6ada9c14cfbc7e9a45c7860a789450f2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e09b188345f4b1e6eafb8dc171c0c6ada9c14cfbc7e9a45c7860a789450f2a
Size

325KB
MD5

499b96e84e7498adfe3f405b81f89266
SHA1

24c2cdd837b38fec1f2f275bc9129a69d7b0662e
SHA256

b7e09b188345f4b1e6eafb8dc171c0c6ada9c14cfbc7e9a45c7860a789450f2a
SHA512

5b7a9d7613d5b6619d72cd04f33fffde3fc0965af75aaa906825f3a74cdda76768a4c313ce9a646522b7028550a7df58ca8f2dc42edb56c77e7fa3c3a9f70c7f
SSDEEP

6144:QG7s7DdOhqaCLyP0zP3Ch6IdPvVokConUMhwZS393JW7yth55K6VIRO:4ndOeiQP3U6I7C4UMhC+iU55loO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e09b188345f4b1e6eafb8dc171c0c6ada9c14cfbc7e9a45c7860a789450f2a

Files

b7e09b188345f4b1e6eafb8dc171c0c6ada9c14cfbc7e9a45c7860a789450f2a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 94KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDFGE
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE