47be87ae93d0a033e0318f6a0a5213320e60b72e5679dc54566ef9cc7eb2cc50 | Triage

Sharing

General

Target

47be87ae93d0a033e0318f6a0a5213320e60b72e5679dc54566ef9cc7eb2cc50
Size

3.6MB
MD5

d6665c47acc38748274e5ca0d88fa48e
SHA1

91a4144d7a73e0efafec8fefa28d4308939d3bb4
SHA256

47be87ae93d0a033e0318f6a0a5213320e60b72e5679dc54566ef9cc7eb2cc50
SHA512

fa0a40b09bb53ecd93dbc7ab0643f5ff5a20eea5265ebb8cff14e1f4c184d2c475e73dbc97f44935038cb240a4a999f366efa147799813e4b2b30da05088b216
SSDEEP

98304:SGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:SekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47be87ae93d0a033e0318f6a0a5213320e60b72e5679dc54566ef9cc7eb2cc50

Files

47be87ae93d0a033e0318f6a0a5213320e60b72e5679dc54566ef9cc7eb2cc50
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE