1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db | Triage

Sharing

General

Target

1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db
Size

2.2MB
MD5

379569a1645d59969694506cdade2207
SHA1

7af02a24eef40f7debeda2852c3cdb766cd3ab70
SHA256

1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db
SHA512

179c5ee119ac29b8204b72ef371a8a3a6522e79c04b7a9471d15c5b57b4f5f09dc4b11c7f726569f727ad98bb8d4cae9bbbd37cdae6e14a80a245071b27168c3
SSDEEP

49152:1tT87iT/FMyaKd06gjtKGwsAX4GbbmHRvdO7idaSglp1:HT1zzaKxUA4GbbmZdVdazp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db

Files

1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE