def92fdeca4c31e1826e0f325d8b5190d6e0936301d95e79a948e8f3527881c6

Sharing

Copy URL Twitter E-mail

General

Target

def92fdeca4c31e1826e0f325d8b5190d6e0936301d95e79a948e8f3527881c6
Size

11.8MB
MD5

bdec21e058b5bea8efbecc3ec8c96064
SHA1

21f9ce7579b7b6ea8ebb1152cf01a0217dda4f1c
SHA256

def92fdeca4c31e1826e0f325d8b5190d6e0936301d95e79a948e8f3527881c6
SHA512

89d6817b12d6f1eec81e1373af3c0bc6e9af2835913a50c034ad274c5865376c05dcc840f7ed21d1ae00a7e3b6324a906fa8f4f970263f26d79d50a0432b1a9e
SSDEEP

196608:189kn1H0Ipheq07uRB60opXp6sIIA3g+bt7I3zHz4evm3O24YlM446ZsoqqFOxj:186FC7uRToasIh3g+x7GnBNYlKt

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def92fdeca4c31e1826e0f325d8b5190d6e0936301d95e79a948e8f3527881c6

Files

def92fdeca4c31e1826e0f325d8b5190d6e0936301d95e79a948e8f3527881c6
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 371KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 1.5MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 2.0MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 371KB - Virtual size: 952KB

.itext Size: 2KB - Virtual size: 4KB

.data Size: 1.9MB - Virtual size: 1.9MB

.bss Size: - Virtual size: 33KB

.idata Size: 14KB - Virtual size: 16KB

.tls Size: - Virtual size: 60B

.rdata Size: 512B - Virtual size: 4KB

.vmp0 Size: 1.5MB - Virtual size: 1.8MB

.vmp1 Size: 512B - Virtual size: 4KB

.vmp2 Size: 2.0MB - Virtual size: 2.2MB

.rsrc Size: 123KB - Virtual size: 380KB

.aspack Size: 23KB - Virtual size: 24KB

.adata Size: - Virtual size: 4KB

.text
Size: 371KB - Virtual size: 952KB

.itext
Size: 2KB - Virtual size: 4KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.bss
Size: - Virtual size: 33KB

.idata
Size: 14KB - Virtual size: 16KB

.tls
Size: - Virtual size: 60B

.rdata
Size: 512B - Virtual size: 4KB

.vmp0
Size: 1.5MB - Virtual size: 1.8MB

.vmp1
Size: 512B - Virtual size: 4KB

.vmp2
Size: 2.0MB - Virtual size: 2.2MB

.rsrc
Size: 123KB - Virtual size: 380KB

.aspack
Size: 23KB - Virtual size: 24KB

.adata
Size: - Virtual size: 4KB