1c9d00d491f1331e49cc8c023ca49f9b90d2fff32d6883c97d495ea97ae7169a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c9d00d491f1331e49cc8c023ca49f9b90d2fff32d6883c97d495ea97ae7169a
Size

3.6MB
MD5

d4fa89c30c2bc1a5b9c8ceb0beeb2229
SHA1

642e061bd4e80a585e498b83d7326c9d448661e4
SHA256

1c9d00d491f1331e49cc8c023ca49f9b90d2fff32d6883c97d495ea97ae7169a
SHA512

4ee8c34ef1a18f6d4ba7f24da0d1f7db375516289c1f5a035999530cdbdbd528df0d5fae66363cce8466da045c5ca15d4594443791b21462e9622f730b24a500
SSDEEP

98304:7P+YOmIkr+XHy8bPWHOA2CCRdUt5vWQO7KQlh:72YOZm+iIeHj2Fmt5vgGmh

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c9d00d491f1331e49cc8c023ca49f9b90d2fff32d6883c97d495ea97ae7169a

Files

1c9d00d491f1331e49cc8c023ca49f9b90d2fff32d6883c97d495ea97ae7169a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 535KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.8MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 73KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE