4da10e88a9cfd8920e2245553ae6d8ea072c4c05cba7cdca0b21e4171fa28834 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da10e88a9cfd8920e2245553ae6d8ea072c4c05cba7cdca0b21e4171fa28834
Size

398KB
MD5

9e81bdef4181a679ce2b309bcc5c9a49
SHA1

a2df376b6ca1aadb90479659d8b4c2511446d59d
SHA256

4da10e88a9cfd8920e2245553ae6d8ea072c4c05cba7cdca0b21e4171fa28834
SHA512

f320cdd3b41caf912d243b4164da4f5b914042fa93dc01c831209f99f85c4296d03b31de4a662d1e81a713a67ac09ff5bc4e99263b72c9c8e911487252b0c0ee
SSDEEP

6144:YjYvT7WVaEcplOD93jzNkId0r1cSDGqxrV+PEjgydSeMAgrFIt:Xxpex9kIOeVvc3Zi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da10e88a9cfd8920e2245553ae6d8ea072c4c05cba7cdca0b21e4171fa28834

Files

4da10e88a9cfd8920e2245553ae6d8ea072c4c05cba7cdca0b21e4171fa28834
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XRG
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 331KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE