c0a6f3bd8f0388de1bca30f6f724a5a7578a04b9eae9275481ee91e9d8a5bb90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a6f3bd8f0388de1bca30f6f724a5a7578a04b9eae9275481ee91e9d8a5bb90
Size

10.0MB
MD5

d0c79caa69cb694617ef2d2deb95b03f
SHA1

3364da9fc307e22a7de0f82c28aeb7d52912bba6
SHA256

c0a6f3bd8f0388de1bca30f6f724a5a7578a04b9eae9275481ee91e9d8a5bb90
SHA512

6bdd142bda8a2e8bed8da2a18144f0d729ef573570223661558a1f4ca2404084b296c80f986db5fad35adf4e18be75040b189a721ad0ba9c2adee397608de7bd
SSDEEP

196608:HZYJ2GfSeEBJ05xKrU9qqHypu6ntd8vAVanqot54B0+UK8pvKnHvu:HZYJr7EY5aaqqHAu6nkAVaqot5G78WHG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a6f3bd8f0388de1bca30f6f724a5a7578a04b9eae9275481ee91e9d8a5bb90

Files

c0a6f3bd8f0388de1bca30f6f724a5a7578a04b9eae9275481ee91e9d8a5bb90
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 665KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.3MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE