61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc[.]exe[.]zip

General

Target

61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc.exe.zip
Size

796KB
MD5

dc792fd333aae204794ac031edeef8ee
SHA1

a9dddebe3a820a26c791a94a6b80ff278730e185
SHA256

248fcb29a4d8dcaa95bf812c42ea14e4c8c63658f1876e9674d2e05bf8d53819
SHA512

e0a8c9fce47bbb24d757807ead31279b235bdddcd092c46e4a578727e0df0faee01e8f78d9e287cb33660b8cc21d811ec82f1951e340056f16523031785968a3
SSDEEP

12288:5i3lwta3fLNJIupq4NxKDzbRTGVDk6a01VloZvtDfB9TesZbgIHnABXKoyTVV2Ms:I3lsaPLNSuUryDxRVlkf3yCbAXKouom2

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc.exe

61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc.exe.zip
.zip

Password: infected
61b2a598615c399739ddc15d3e553ae51c4d609ab4f19474db9f9a5dfbf5d2bc.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 782KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE