dbbe1336a5e56ecbba785aa23df517f5b4f8f45d35e99c67bfce6741a4d75c8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbbe1336a5e56ecbba785aa23df517f5b4f8f45d35e99c67bfce6741a4d75c8e
Size

6.2MB
MD5

344b475fef6cb2ddd29a7ce1e2638d56
SHA1

f0f57b70c6c412bc73434e1c2afb22282a22b162
SHA256

dbbe1336a5e56ecbba785aa23df517f5b4f8f45d35e99c67bfce6741a4d75c8e
SHA512

1f3840ecadba6a6ec19bfc0874fcc37dd17634d3ffbe889a4ff6c7bbe1287bcbf7fd14033f3410f055867b395f0a0423a4a17684bb261b31016910db6a7cf614
SSDEEP

98304:R5gyOuEGaaMr1waC4CQxz5KD0coVuyQfpjM/7ZbPZN13MpiRtrKieE5ZevkJprO:R5gygr1e4/5KQV8pY/7ZBPVKpKevWpC

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbbe1336a5e56ecbba785aa23df517f5b4f8f45d35e99c67bfce6741a4d75c8e

Files

dbbe1336a5e56ecbba785aa23df517f5b4f8f45d35e99c67bfce6741a4d75c8e
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 754KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.7MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE