fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3[.]exe[.]zip

General

Target

fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3.exe.zip
Size

2.3MB
MD5

72cd03f563d571eef7ee6cca3eaefde8
SHA1

64cb9b6987b274b6739587198f791b938ecfe73b
SHA256

d44160e3a5b41826eb8d3192a1f8e7c43aad0ec192568dd6c0c2b8a14c04a62e
SHA512

554838949c494ffd4afd3ad04eb75de9d653d9b6f9a06464ab626efc1128996418334fdc34613388aabfab7f17844814efbbf70ea8aee88b9310e0bc9ec12900
SSDEEP

49152:ASHkU14xlqP5vr0tW3j2DTdrtaewhCWe7MU/Cv/k6r/q5agHETrMvlhqy:5EU4qBv4tKj2FrtaewhCWe7M+Cn/418m

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3.exe

fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3.exe.zip
.zip

Password: infected
fa729ca35a25abcf2e62339aa4688687abfb5d9aa19b7f691b77b0354ce66ec3.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 185KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.1MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE