be4b7da23b6af0247462ccfae61674353cbf5ae8a1fa16cc2f66b0e585b0c6d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be4b7da23b6af0247462ccfae61674353cbf5ae8a1fa16cc2f66b0e585b0c6d8
Size

54KB
MD5

a5eec571c806a9294ab37c133bbbcccc
SHA1

f3dabf5e3c09db7385355bccf4c9d5feedcd7e12
SHA256

be4b7da23b6af0247462ccfae61674353cbf5ae8a1fa16cc2f66b0e585b0c6d8
SHA512

d95a910783d2b73eb9eba261aa470f19d9ca6f2d99f4e7287ec2324ae12c1a01ffd5d4cfe57a56dfdf06395ee7ee573a211e58ad42a2a44a1106fadade392251
SSDEEP

1536:dB9o2xufDfzt2iXqQJU4NZQ5CUhFL+v9:msMDzHJ7Ny1rL+

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4b7da23b6af0247462ccfae61674353cbf5ae8a1fa16cc2f66b0e585b0c6d8

Files

be4b7da23b6af0247462ccfae61674353cbf5ae8a1fa16cc2f66b0e585b0c6d8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE