0a742fa1fde229a1d2b4b71f1a37b82cbbc4d85a142c6a04500ef543e42857d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a742fa1fde229a1d2b4b71f1a37b82cbbc4d85a142c6a04500ef543e42857d0
Size

674KB
MD5

fd2c6222c411e0f845843a620812a9df
SHA1

1c847c338bac3a6a63f11699451be773c126d72f
SHA256

0a742fa1fde229a1d2b4b71f1a37b82cbbc4d85a142c6a04500ef543e42857d0
SHA512

d81bbc56022005e12ac26988a7a61cb3aeedfc7faadbae8eb43cd000a20462ff52be75939de0d613e2f62e43f61764a46d670f7872e8949ae4b10b97250e2b57
SSDEEP

12288:yfvvzli4FUSFspBCzNM9FPLc6nujcwT+j9OhcwEXxmwYeLTcBJ/jeqm71YwVey8J:yfnlUSOrzFPwcwT+mcwJeLA//ja1YwVS

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a742fa1fde229a1d2b4b71f1a37b82cbbc4d85a142c6a04500ef543e42857d0

Files

0a742fa1fde229a1d2b4b71f1a37b82cbbc4d85a142c6a04500ef543e42857d0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 344KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 3KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 271KB - Virtual size: 38.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE