6e5ea6be171e4f9d06bc4b4544fb50a8e89794a59523bdb5ca718a880221789b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e5ea6be171e4f9d06bc4b4544fb50a8e89794a59523bdb5ca718a880221789b
Size

3.6MB
MD5

29515cb076eb84ec9f53b42aa4fa54a5
SHA1

a986ffe9c9e8594ae12b255c05997c1ffd331530
SHA256

6e5ea6be171e4f9d06bc4b4544fb50a8e89794a59523bdb5ca718a880221789b
SHA512

d18b6091925fec6a63d2021944dc7c33f4d2f42f5daf822dfa542af66d8530e9c86dd058478de234a6ac346b5293bf0cbff157b4cd44759f687aa2e6234652f9
SSDEEP

98304:jK9yHX9eVsjl94Iel2q5bTTBQYOA2DYFEC6:u+X9AsJ/U2QVOAL6B

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e5ea6be171e4f9d06bc4b4544fb50a8e89794a59523bdb5ca718a880221789b

Files

6e5ea6be171e4f9d06bc4b4544fb50a8e89794a59523bdb5ca718a880221789b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 535KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.8MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 73KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE