6d4f669003461e92fc41fc9058f7577e203b8d126688c38b01861b0f3fe1777a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d4f669003461e92fc41fc9058f7577e203b8d126688c38b01861b0f3fe1777a
Size

368KB
MD5

ececc831249a15f2418c659c5ba030ea
SHA1

b54c757d434d560eef64ab7d843752a9a2833a45
SHA256

6d4f669003461e92fc41fc9058f7577e203b8d126688c38b01861b0f3fe1777a
SHA512

163fdaeef182ca3e495cb1e86252e3b57da2d72d5416a98c2b6e93c09685510c049598c060b128c8caef595c0c3a11df491e59b5654cfcffc9e7ca9a26636144
SSDEEP

6144:14X/La15TohoVW6ChLKqQI23AfspzyO4EqkHHOsLz:1E/LkzVBgLKqQIAN11

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d4f669003461e92fc41fc9058f7577e203b8d126688c38b01861b0f3fe1777a

Files

6d4f669003461e92fc41fc9058f7577e203b8d126688c38b01861b0f3fe1777a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE