0f068a94842680fdcfe9b89b061d2ee0ed65a6d6e99b2e98e512c48ef0e56f08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f068a94842680fdcfe9b89b061d2ee0ed65a6d6e99b2e98e512c48ef0e56f08
Size

5.9MB
MD5

f03e98b332213f86d3f50264a4d02973
SHA1

83e4fe533f36d8afba28ceb5ce5924c17d74709c
SHA256

0f068a94842680fdcfe9b89b061d2ee0ed65a6d6e99b2e98e512c48ef0e56f08
SHA512

0c0a7742d031e75e8242c9321293b191c4f57fb432dd88d9feda628b1a30112894a82e120284768e94ed1e2a7cce3b69a38c8f90fdc3a6380490003a98becde8
SSDEEP

49152:0L3zwR5piNUKQFKDOAAzaFBCvEnxxfxa3X2KhzzQzUqJB:Bjp4OA3FBCvEnxxIn2K1cz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f068a94842680fdcfe9b89b061d2ee0ed65a6d6e99b2e98e512c48ef0e56f08

Files

0f068a94842680fdcfe9b89b061d2ee0ed65a6d6e99b2e98e512c48ef0e56f08
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.4MB - Virtual size: 35.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE