b13f118c6052f59ac41c1b030fa0032b497c62ce9347bb897e526f1f926c9572 | Triage

Sharing

General

Target

b13f118c6052f59ac41c1b030fa0032b497c62ce9347bb897e526f1f926c9572
Size

488KB
MD5

7aa83d5dba5efa2050e91527737102d9
SHA1

877592cc4bc986a71ba46ed43159abedce8803a0
SHA256

b13f118c6052f59ac41c1b030fa0032b497c62ce9347bb897e526f1f926c9572
SHA512

245aac0f6b855bb65f62b34b938052936511f47d4da9362968e3035908d979bd92cc13978eb651a86b6624ea4b1e328cd4369250c021239768dfa39f614526c1
SSDEEP

12288:10y496APZbLINmZ8QLYJOoPZFU975kFnXjDnsmTbFUImc0R:KHZ/nYJdnwkBjTn0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13f118c6052f59ac41c1b030fa0032b497c62ce9347bb897e526f1f926c9572

Files

b13f118c6052f59ac41c1b030fa0032b497c62ce9347bb897e526f1f926c9572
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 479KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE