b6cf72720f2905045980080094c79a6de12e2bc9c13b968808437b08f7f7248b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6cf72720f2905045980080094c79a6de12e2bc9c13b968808437b08f7f7248b
Size

1.3MB
MD5

b6164b92b0eb227cf529e71a663df2a9
SHA1

1baa78ca738e355783d059f40420e54df444faf5
SHA256

b6cf72720f2905045980080094c79a6de12e2bc9c13b968808437b08f7f7248b
SHA512

526efc40991c8e9dbff4c8a3b7afb4ec4a918a43f9741d2c2c26ce8dd5a7dfad32d2671a18587b4c0d7276c89e4983502bda1c86c813fec9ab24bf05a8a05477
SSDEEP

24576:XMCS9CmSKWvYNRvQ7GbgI35tmXtPNJhL0EqS5yOAkurT8:qCwWeRvhtm9PLhoELu

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6cf72720f2905045980080094c79a6de12e2bc9c13b968808437b08f7f7248b

Files

b6cf72720f2905045980080094c79a6de12e2bc9c13b968808437b08f7f7248b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE