f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82[.]exe[.]zip

General

Target

f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82.exe.zip
Size

850KB
MD5

26f3a26b9ffbbd39a57c3b5db00e59d1
SHA1

ac521f12f52a3ee7d177dddac10f446054a743b2
SHA256

9ca0b3e82acae3efeccc65bb9e264bae6dc5ced90ba6b54a31fa226174cab70b
SHA512

e2564063ed5570d8fbdb714c28b52ac48fe4f74eb1a78994b764eb6283943f47b11b8d05797b83587a96bd2664e2e3cc9c82a5f594e266e6cf3d06260abc47fe
SSDEEP

24576:WP8qHKNvc09jFClqeH6KdcTSn90uF2g2cjf:WP8MKNvtjklRd/V2gf

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82.exe

f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82.exe.zip
.zip

Password: infected
f36bade81f5258a1f9d870a9e587e080a03a5d8a0fecc6ec554cca7124400e82.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 836KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE