6474e448031e5a615def3a0f7bb4c36d70ab49082af3ebdc9b29a88800e59f04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6474e448031e5a615def3a0f7bb4c36d70ab49082af3ebdc9b29a88800e59f04
Size

367KB
MD5

e90acf264164b8d45f6248a3c26a1a2d
SHA1

ab2b0e99fdbbfabb7a2801a71dcfd0a77b3ad92e
SHA256

6474e448031e5a615def3a0f7bb4c36d70ab49082af3ebdc9b29a88800e59f04
SHA512

49494a6bb876102ac80a3b523cb27ed9d03b3b7b34791436ea503b6ea291e111d41beaf08634c5a2a9285befe286c01d03ae226d065e4f175c9a0eda91fadb21
SSDEEP

6144:fGO/ZlKJ4YYn1gKKAiJZKWLKobml3PeBQYFQYj:fGO/kPAiUWLKo6heBQYFQYj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6474e448031e5a615def3a0f7bb4c36d70ab49082af3ebdc9b29a88800e59f04

Files

6474e448031e5a615def3a0f7bb4c36d70ab49082af3ebdc9b29a88800e59f04
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 257KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE