2f6b4053bccaf6601a854254d923a4d9493121f1c98f3bb4e9b899ce6b68bdb6 | Triage

Sharing

General

Target

2f6b4053bccaf6601a854254d923a4d9493121f1c98f3bb4e9b899ce6b68bdb6
Size

714KB
MD5

de3d3cd72bae435af14b5227c64cb482
SHA1

2e402b6ff6860dcf7c732d84dab09679e4f4ba5c
SHA256

2f6b4053bccaf6601a854254d923a4d9493121f1c98f3bb4e9b899ce6b68bdb6
SHA512

873818c8d81919a89932c6812c3bfb04e08eeffb04cf0cfdcc8ea83937f1424e7bf833faeaf169f12f9fd02507b5d94497188a8f6a37909158a4517d6d23556b
SSDEEP

12288:/8NOys4SYEAiVe2SO45KWfbfVMbrMXl9Q9/iuiND/wfX6o49JGMI9zOlHS5wKfLR:EIyOYEFUh02ubQbVnwfX6ZGt9USmKfTJ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6b4053bccaf6601a854254d923a4d9493121f1c98f3bb4e9b899ce6b68bdb6

Files

2f6b4053bccaf6601a854254d923a4d9493121f1c98f3bb4e9b899ce6b68bdb6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 543KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 57KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 63KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE