f41127478f06c7ae7678e61ca05988789cbb78beb04d105cb5ddfc441d9aa630 | Triage

Sharing

General

Target

f41127478f06c7ae7678e61ca05988789cbb78beb04d105cb5ddfc441d9aa630
Size

343KB
MD5

2ec3a66a0590ce7cfc2ef71e71635860
SHA1

062db91c2fcd8d0d7e44bf25e168bd0c0b0ff949
SHA256

f41127478f06c7ae7678e61ca05988789cbb78beb04d105cb5ddfc441d9aa630
SHA512

b0db83935fc32d4aac973225ee15f059c0c23d1cc2be8f32d6cb5689c216c8d0af64f7b62f7029dc3ec8dd16ff7639e826d5ff95277aa4302b03c1f5f61b8694
SSDEEP

6144:mCU/d3jO7xaRzfap6a3hTW1QZ6/uPKADFBWe0EbDP3dGbQXoh0W4CChNb:m95jOYRzyp6WhTWmPVDvb3D4hR4CChp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f41127478f06c7ae7678e61ca05988789cbb78beb04d105cb5ddfc441d9aa630

Files

f41127478f06c7ae7678e61ca05988789cbb78beb04d105cb5ddfc441d9aa630
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 252KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE