d44ae7dead75aea369d886f5dfd15a4f7896983498e4e6f1e3fe3150bec59287 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d44ae7dead75aea369d886f5dfd15a4f7896983498e4e6f1e3fe3150bec59287
Size

295KB
MD5

a6864d89ad1611c3d6fd154dfbd7783c
SHA1

eb44b9ccf00032450f1dc8d0d32ac7aecbac473e
SHA256

d44ae7dead75aea369d886f5dfd15a4f7896983498e4e6f1e3fe3150bec59287
SHA512

75a231d8e1a09ccfe2185c1b73cee30cefb38236bf96db21873f7a1c31b5cba2941993d2247f583f0adceecfd95c631bf39c8c3d340cad772024480169d787b6
SSDEEP

6144:DH+AQl6qND1japloMllO+aBj/yA9ElOo3XKlURxylhh4q97ZZQ:CJLYLf0Bja5BX+X/hr7D

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44ae7dead75aea369d886f5dfd15a4f7896983498e4e6f1e3fe3150bec59287

Files

d44ae7dead75aea369d886f5dfd15a4f7896983498e4e6f1e3fe3150bec59287
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 235KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dashi
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE