1729a21cfdc53e58c6da8a63ab96cfa2ccf3bea7341f0124669616e6d2bb2db9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1729a21cfdc53e58c6da8a63ab96cfa2ccf3bea7341f0124669616e6d2bb2db9
Size

475KB
MD5

eaaed10583749bcac36440358a95fe13
SHA1

420678cb0339c6aae5328dcbbda81c5be7b3ae2a
SHA256

1729a21cfdc53e58c6da8a63ab96cfa2ccf3bea7341f0124669616e6d2bb2db9
SHA512

3d505eb37af91091335c6573548702d1e25b731f0010ae52818da0a4c3a28c46877109c81df36dfa7ab0c75e147bbe832db852a7fd4e5a41234a69bb9cd6f8bf
SSDEEP

6144:+PDRNnuxNc9CyR7TRga+71YtmlIOLVu1i6tH6Zu+AN/TvPT5BdK1:+tYM9C+ma+71smwftou+AN7z5nK1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1729a21cfdc53e58c6da8a63ab96cfa2ccf3bea7341f0124669616e6d2bb2db9

Files

1729a21cfdc53e58c6da8a63ab96cfa2ccf3bea7341f0124669616e6d2bb2db9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE