0023b821f85c7c5671500834233ec63d6a4bb3eef0e492b0d8541150eea0942b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0023b821f85c7c5671500834233ec63d6a4bb3eef0e492b0d8541150eea0942b
Size

673KB
MD5

08e7e5d12abc71cb0abc109cc11cedcb
SHA1

2eb7f4972224e0efff7b3c0f9e451111c47821da
SHA256

0023b821f85c7c5671500834233ec63d6a4bb3eef0e492b0d8541150eea0942b
SHA512

f31443acdebb383e33f947ab719a213e482b7a5dacbaf60f69f7558dd6f7193488946da9668196c8805754479671dc0f4d1904db582aaaface70008c72010cc4
SSDEEP

12288:99t2rq5Stmpz/Am8DZxooaioAVMR5nWFpPoS96g59E0FkGQNF:99t2rq5SkAjFxTaXAV/bLvE0ufN

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0023b821f85c7c5671500834233ec63d6a4bb3eef0e492b0d8541150eea0942b

Files

0023b821f85c7c5671500834233ec63d6a4bb3eef0e492b0d8541150eea0942b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 316KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE