5e244b3b8b6107327285e60644c5668c6f71153cf5ea7db4a46a6c815b48793b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e244b3b8b6107327285e60644c5668c6f71153cf5ea7db4a46a6c815b48793b
Size

2.2MB
MD5

caaa70573fe943678792a636981d1841
SHA1

db4e04d78a8eed10f256a4cbdea9ba3e9c8542b3
SHA256

5e244b3b8b6107327285e60644c5668c6f71153cf5ea7db4a46a6c815b48793b
SHA512

7e2aad1fa21ffb3c94b5dda58aa1456ed24dbe4dfabe08c35099149a8ca941495c4df9431041adf6a9427a1660f0d4a2e6a8772b087adf1695447fbc3f399b55
SSDEEP

49152:aej4PY9JNSFunx1BBqIVniT0RUrhouhzEYLXCGLcv7H:Ex0x1BBqIFiT0RUrhoooc3Lcv7H

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e244b3b8b6107327285e60644c5668c6f71153cf5ea7db4a46a6c815b48793b

Files

5e244b3b8b6107327285e60644c5668c6f71153cf5ea7db4a46a6c815b48793b
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 925KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 722KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VMP
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE