b7c2aed316402fe2b03ebadf6fa0685b10c68bf0f9e5d87f673a6fdbdf27ec29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7c2aed316402fe2b03ebadf6fa0685b10c68bf0f9e5d87f673a6fdbdf27ec29
Size

726KB
MD5

25156b65fd0bfa398497c6a6dead345b
SHA1

802f01d6ad67b8573a87b25ae23f22e1663b9889
SHA256

b7c2aed316402fe2b03ebadf6fa0685b10c68bf0f9e5d87f673a6fdbdf27ec29
SHA512

ce7fade8da99de49298bfb97fc928f22340a3cc31d217823bbcf9b9c68f0e2cbc7e51e7fc8e78bf1df4e115290b68a67bae500ba399895d057609d9ab005691b
SSDEEP

6144:Gwgb3Yz9aQ2vLViDnehnR3mhvkT/fvWvOlTq4i4j4V6nNDdH8y3egMQcRQJx/an2:GwE3YYbJiDen2RkTtJTi4s4MeoQjMu

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c2aed316402fe2b03ebadf6fa0685b10c68bf0f9e5d87f673a6fdbdf27ec29

Files

b7c2aed316402fe2b03ebadf6fa0685b10c68bf0f9e5d87f673a6fdbdf27ec29
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 421KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 225KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE