7c9218479e4960f0cbd874d6bcfea0e5dee8b335f026ebdf41b17a188654c6b1 | Triage

Sharing

General

Target

7c9218479e4960f0cbd874d6bcfea0e5dee8b335f026ebdf41b17a188654c6b1
Size

679KB
MD5

28588aed819161fee4c1694223a7e9df
SHA1

bd53665d96b368d44a5572351dbd37eb9dc8cb22
SHA256

7c9218479e4960f0cbd874d6bcfea0e5dee8b335f026ebdf41b17a188654c6b1
SHA512

f10f0625e4b7b6264bce03f9cd8520541d43031a3958306166145228471ea201aefdb05f97522c08c1fa5cbb488eb1432c5fad435ef353ba97ce6f74402d20af
SSDEEP

12288:tn+5p/F7IVk7Tt6V1LxqtYylwNWl7PqX2IerUUDsc05cZ7OJgh1:ExIVjPqtYylw724UwcO26gT

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c9218479e4960f0cbd874d6bcfea0e5dee8b335f026ebdf41b17a188654c6b1

Files

7c9218479e4960f0cbd874d6bcfea0e5dee8b335f026ebdf41b17a188654c6b1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 348KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 272KB - Virtual size: 38.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE