mal | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mal
Size

2.3MB
MD5

4ac962465c4d2ac4774afcfe47b48e17
SHA1

85b97b7dc2aff6bb8715b67eb385d81341048f84
SHA256

3cc8ed4459dacce81c92ba4d8b09a479ea859de34708ae96fdaee802379bcba9
SHA512

b41ab9e15fb0670527645f704bb2f7f70006c1782fbe265d79b4e52f4e34d471f1fd2db6877a612fd39252f2ff9bbac889007ff8d7e10d6aa7fe84154e1d71e9
SSDEEP

24576:PU09DfhoSuIYdLCmZ3oz4Q37SHb5vifC3TVrPnM08yWVVFpDRoZ+uQ5p3P3nt3Zj:5d5qLCmZYsHvQQVTMjyWzD+Ct3Z7X

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mal

Files

mal
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 42KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 435KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/29
Size: 69KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/41
Size: 5KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/55
Size: 22KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/67
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/78
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/94
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/110
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 220KB - Virtual size: 760KB

.data Size: 512B - Virtual size: 8KB

.rdata Size: 45KB - Virtual size: 96KB

/4 Size: 42KB - Virtual size: 256KB

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 435KB - Virtual size: 5.0MB

.reloc Size: 14KB - Virtual size: 24KB

/14 Size: 1024B - Virtual size: 4KB

/29 Size: 69KB - Virtual size: 224KB

/41 Size: 5KB - Virtual size: 24KB

/55 Size: 22KB - Virtual size: 44KB

/67 Size: 512B - Virtual size: 4KB

/78 Size: 2KB - Virtual size: 16KB

/94 Size: 21KB - Virtual size: 48KB

/110 Size: 1KB - Virtual size: 4KB

.1 Size: 9KB - Virtual size: 12KB

.2 Size: - Virtual size: 4KB

.text
Size: 220KB - Virtual size: 760KB

.data
Size: 512B - Virtual size: 8KB

.rdata
Size: 45KB - Virtual size: 96KB

/4
Size: 42KB - Virtual size: 256KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 435KB - Virtual size: 5.0MB

.reloc
Size: 14KB - Virtual size: 24KB

/14
Size: 1024B - Virtual size: 4KB

/29
Size: 69KB - Virtual size: 224KB

/41
Size: 5KB - Virtual size: 24KB

/55
Size: 22KB - Virtual size: 44KB

/67
Size: 512B - Virtual size: 4KB

/78
Size: 2KB - Virtual size: 16KB

/94
Size: 21KB - Virtual size: 48KB

/110
Size: 1KB - Virtual size: 4KB

.1
Size: 9KB - Virtual size: 12KB

.2
Size: - Virtual size: 4KB