537c0d1af1ac5591af85364709f1e1b75aa4b857e8ebe7157a8e91a2aa1ebb5d | Triage

Sharing

General

Target

537c0d1af1ac5591af85364709f1e1b75aa4b857e8ebe7157a8e91a2aa1ebb5d
Size

821KB
MD5

1174ec569771655b4d5ef2bbf02c9379
SHA1

03b99b84cee20eaca747558d0caeed2ba2b569bd
SHA256

537c0d1af1ac5591af85364709f1e1b75aa4b857e8ebe7157a8e91a2aa1ebb5d
SHA512

ee8cdc8d187ee8878e8e1dc8a7cc12dce6277093a31ee2f98eba8a832b13ed461369b7a74a845e9d0295f2fde8d50238b4254e237f22d38a4cebf65a528ab940
SSDEEP

12288:VnyQFwVm1Bl8MkRu4PByPXRlNso2lPmjGREvUKlsE4JZZZVqvC:Vny9Vm1P8PR34fRly9FmB8NE4JZZZkq

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
537c0d1af1ac5591af85364709f1e1b75aa4b857e8ebe7157a8e91a2aa1ebb5d

Files

537c0d1af1ac5591af85364709f1e1b75aa4b857e8ebe7157a8e91a2aa1ebb5d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 243KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 365KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE