10852088326b32a8093aa63500633e4d22eb63bf2d73f1a25d60eee673965922 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10852088326b32a8093aa63500633e4d22eb63bf2d73f1a25d60eee673965922
Size

3.6MB
MD5

d5e87b98246429ba312e83964bb5529d
SHA1

c95e075e097cd381b7bea5c11638d1596f15124b
SHA256

10852088326b32a8093aa63500633e4d22eb63bf2d73f1a25d60eee673965922
SHA512

b2c962eb9118175c352ff946847f15be4efea3db31d6553b4b8471aea321a58ca5ba125105767db0eb275fb86bd2448af38b2ab66c3717ded0b5e079b0debee5
SSDEEP

98304:CGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:CekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10852088326b32a8093aa63500633e4d22eb63bf2d73f1a25d60eee673965922

Files

10852088326b32a8093aa63500633e4d22eb63bf2d73f1a25d60eee673965922
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE