9162c79920c2ce5117a068f35c87b07c9b73ea5f8861b787604570c059aa5637 | Triage

Sharing

General

Target

9162c79920c2ce5117a068f35c87b07c9b73ea5f8861b787604570c059aa5637
Size

3.7MB
MD5

0d3e05bbc7661d5a5485b3a8d3bd5d1d
SHA1

a18d5a2f1717d3daa89ad7defaffd83200625eef
SHA256

9162c79920c2ce5117a068f35c87b07c9b73ea5f8861b787604570c059aa5637
SHA512

650a3dc8acca11a93f98c50bdd83067ff7ede25869a867bf99e3a946b6d9b8546413d78a032891fb02c6ca439f1e7a96762ef5a0fd381d971d392c83ae14795b
SSDEEP

49152:Z5DHE2+Nwn1wramjhyGkP7uH+8sbWMRR1CMoZQ6:PMNwnirBQGki+8MRR3o

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9162c79920c2ce5117a068f35c87b07c9b73ea5f8861b787604570c059aa5637

Files

9162c79920c2ce5117a068f35c87b07c9b73ea5f8861b787604570c059aa5637
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 606KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE