e5093faef21a0ef43c9dd42af736d71ac44078427b9e4604f3c13978e0e59edf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5093faef21a0ef43c9dd42af736d71ac44078427b9e4604f3c13978e0e59edf
Size

802KB
MD5

bc38c0b325beef44429013ee998655d3
SHA1

a1e3a8295d1849a583677b1e7f78a91a36ef282a
SHA256

e5093faef21a0ef43c9dd42af736d71ac44078427b9e4604f3c13978e0e59edf
SHA512

9b304117a445c17ab4a22de0ccc01cf80516198a70a3ca5a09505c5ccb8a59476009ffbf0c4089aa82e5790cf9421c44381f4f97f0044e80ca9d0499ee3eecd9
SSDEEP

12288:aMmyj8eaEBJ92Cynvuoeus17JFNRghSii0noFCoAzrxDvhi06niZ0+v/rzx:Vfj8e1v2Mvua7JX20AomvhX3x

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5093faef21a0ef43c9dd42af736d71ac44078427b9e4604f3c13978e0e59edf

Files

e5093faef21a0ef43c9dd42af736d71ac44078427b9e4604f3c13978e0e59edf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 249KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 389KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ