740145bc7a1e1fd40b107c88da0d4275493aba6250bce295aab21568a1750c4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

740145bc7a1e1fd40b107c88da0d4275493aba6250bce295aab21568a1750c4f
Size

743KB
MD5

dd794115459c7e1aff554b0dc92edc07
SHA1

cd6243744d2937c37bbba1da87ac3bd16cd326ad
SHA256

740145bc7a1e1fd40b107c88da0d4275493aba6250bce295aab21568a1750c4f
SHA512

08200195ebf2b2ba9c48a8eb1ea4f6c522fde8aa9fcc243d5207bed12ae0564d9bd7f8656bd41911f18f8ee729a029f04fae31297279ce75404505e241704f71
SSDEEP

12288:QuHzEEgsHt90a9943JSLuMNzv9jwnV2ubiLNnmkxgs79Gu28eYF1yehvv+dRCsri:rzpge9n3Lu4J+LiLdJUuTVF1yQH+dZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
740145bc7a1e1fd40b107c88da0d4275493aba6250bce295aab21568a1750c4f

Files

740145bc7a1e1fd40b107c88da0d4275493aba6250bce295aab21568a1750c4f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 380KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 286KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE