ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24[.]exe[.]zip

General

Target

ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24.exe.zip
Size

4.1MB
MD5

a0099e065ba0f918b65c1104b9c128e4
SHA1

f696a065f2a7fcad05658b7356bb4f194fc40971
SHA256

4e29dec671b111aad365d9221783bde45dbf4a05c5746fc3a6ccba422f05992f
SHA512

0c1799d4f5601b5d91dc27160af5246bf955348e94efa0824cec1708d9bcffebab9f3094b9dcc2155ec654fb65295cad1d5173c188c6f6435a111af9d5c1b278
SSDEEP

98304:Mrp9usRBOKUaDPdfnT2RjFJtZvXtqGI6xS2751zyujuBVhNXt1:Mr3usfxD1WjRqGO27HzyuKnhNP

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24.exe

ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24.exe.zip
.zip

Password: infected
ffd8b3d9c74e7cb0df422c92b63ee731ca4f6410f916ee346c69fe51eb7c5c24.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE