4464bf29720004be6db6adae2009c0a5b0748b3a43138293b210d63000258af1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4464bf29720004be6db6adae2009c0a5b0748b3a43138293b210d63000258af1
Size

9.8MB
MD5

d2d7441cbff1c72dc5d3741bb9a3a913
SHA1

09a96929df2d9feb0695e39caf9a218538bd1e57
SHA256

4464bf29720004be6db6adae2009c0a5b0748b3a43138293b210d63000258af1
SHA512

4a5c3ef110757ef06195a794503f2c996745d13b5b66a5588f261cd9ed3339236d6b6bc53b3581ec56e2de6c35f2b2802baf0d097a6dc70a6d94001e05118f5e
SSDEEP

196608:qaEOb/VGf0oUF5s2N2zFid0/pqzEuLFX9HqVoZYAEhsaXsHm7Rxxzh9:qa9uxUZNCtdVAEVZz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4464bf29720004be6db6adae2009c0a5b0748b3a43138293b210d63000258af1

Files

4464bf29720004be6db6adae2009c0a5b0748b3a43138293b210d63000258af1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 666KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 59KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE