0cdd8479e25efbc21d27cff7cba805c7a0c524000a1cac90e9ac0e57d5b5dbff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cdd8479e25efbc21d27cff7cba805c7a0c524000a1cac90e9ac0e57d5b5dbff
Size

2.2MB
MD5

e3e0cb33a57d635421c73cae1f0c051c
SHA1

97b67e7ea78a9d67a27f729d907fba7270aef617
SHA256

0cdd8479e25efbc21d27cff7cba805c7a0c524000a1cac90e9ac0e57d5b5dbff
SHA512

a9339968bb199e5d799b63fade372679efba46f7f8aeff4ab9fc7e0ca291960ecb761bbb3e18f904f9e1286863e9772f9b7be0394afab41ea483b7878aad40aa
SSDEEP

49152:ogk0dXP1XPHP4oGmLf5gK0BFBq/PWGXfdDAp0c88AC8:75VHP4onfH/PWGv1U8G8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cdd8479e25efbc21d27cff7cba805c7a0c524000a1cac90e9ac0e57d5b5dbff

Files

0cdd8479e25efbc21d27cff7cba805c7a0c524000a1cac90e9ac0e57d5b5dbff
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE