89e2e3de5e8e651e4085ce2e32d5250b2081dcff191dc92d1b7c890fa6cc3739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89e2e3de5e8e651e4085ce2e32d5250b2081dcff191dc92d1b7c890fa6cc3739
Size

324KB
MD5

2656c323ad3b5e47bce90aed9df9651a
SHA1

6500366d2ada3107ae61fb1fb1b67c8a4a1b3084
SHA256

89e2e3de5e8e651e4085ce2e32d5250b2081dcff191dc92d1b7c890fa6cc3739
SHA512

d68f9f5ba29a7aead2f477ed80f2914cbb2d31fae21ae217db682588b98cc1db62b5447c7364e6abb677a7139915fbaede196a86db1fd57b45905a4421c5bb79
SSDEEP

3072:B1tqObPGCSQ6NhmkBCprZZJ5/FUi3Fp7kDdy4HFROZh5GwW/LAlCsZ0xITUUFac:B18OqCSvz9BcXf5k73QcJ/8gfITUUF

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e2e3de5e8e651e4085ce2e32d5250b2081dcff191dc92d1b7c890fa6cc3739

Files

89e2e3de5e8e651e4085ce2e32d5250b2081dcff191dc92d1b7c890fa6cc3739
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 255KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE