76d17ea2ed2517fe7ef52d2798859882276bbc661cfb7b1c7a4d392c972afac5 | Triage

Sharing

General

Target

76d17ea2ed2517fe7ef52d2798859882276bbc661cfb7b1c7a4d392c972afac5
Size

8.5MB
MD5

2f9035243a0eb3c110e82bfc77206952
SHA1

a887f5a90801e77ce9192af7d86bdf3acc075bd0
SHA256

76d17ea2ed2517fe7ef52d2798859882276bbc661cfb7b1c7a4d392c972afac5
SHA512

3762ee86f960c13923569908b98c6c725197bdd8e039894434c3a5d2a183ed514fbad585f6f6bf9388f86a6305e26537f4c3c2d6a9dece3dc1fe444eea43e56d
SSDEEP

196608:gTLzse7S4W2U37bM+0y1g1pIiVt6XrnWmyy48jqng:2Lzseo2G7bnlYDVt6XTWms

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d17ea2ed2517fe7ef52d2798859882276bbc661cfb7b1c7a4d392c972afac5

Files

76d17ea2ed2517fe7ef52d2798859882276bbc661cfb7b1c7a4d392c972afac5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 481KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8.0MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE