220d18f1cf4845ab67fc780424817af92f451332d0b3409a0a6e279098e7c2cc | Triage

Sharing

General

Target

220d18f1cf4845ab67fc780424817af92f451332d0b3409a0a6e279098e7c2cc
Size

1.6MB
MD5

0c648f3bd575ff3cd789a3144a047186
SHA1

d7c1eab463be1494eb1f8f2c2307ef0cbe0b9174
SHA256

220d18f1cf4845ab67fc780424817af92f451332d0b3409a0a6e279098e7c2cc
SHA512

8613f5b5904f80aa7bfa904ce4c9d9d29fa48ef9d95c9c4ba2b7763e38cc397051dc4c18883e6c59b8973b7daec320fd5265eff99adee0b109d1b71673c94489
SSDEEP

24576:Cv4xzh5jQ47DLG/dnLx00wligOilRmKJeeEgoFeEFRKOi2+f4G442Z7Uj/LIF8VY:G4x86GrNwlXRbuFLF10t4BZM1ZnO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220d18f1cf4845ab67fc780424817af92f451332d0b3409a0a6e279098e7c2cc

Files

220d18f1cf4845ab67fc780424817af92f451332d0b3409a0a6e279098e7c2cc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

OQtt#K'5
Size: 497KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

`\x1\#Hs
Size: 36KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FX6O&p8y
Size: 38KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

K92KrX>L
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE