fc15045db2b93e48a0cc57f2d1a4faf8d47040baae185ad22f16258920704648 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc15045db2b93e48a0cc57f2d1a4faf8d47040baae185ad22f16258920704648
Size

3.6MB
MD5

ecb035b62b57a9177dbe7bf0843885a0
SHA1

73ba79579c6dd54d7a50da5484586845f4d3e945
SHA256

fc15045db2b93e48a0cc57f2d1a4faf8d47040baae185ad22f16258920704648
SHA512

4bb95853d2565e387f381f39b6de3dc38418b5e081cc11c96c323f739dd16fd6627ac0717f0a0abb402e3ae06714228b0d7eae10511ea3763d8cbe538e6f5aca
SSDEEP

98304:NIrvN6kfp0/BW6wwnUG5vo1ImukhLV0l/P6MHmhYIC:2ckfp0/B9wF7OkZV0laMHUV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc15045db2b93e48a0cc57f2d1a4faf8d47040baae185ad22f16258920704648

Files

fc15045db2b93e48a0cc57f2d1a4faf8d47040baae185ad22f16258920704648
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE