c49b2a61848d3e404233be2341acb35b7db9644b23af759052011680129f0a1a | Triage

Sharing

General

Target

c49b2a61848d3e404233be2341acb35b7db9644b23af759052011680129f0a1a
Size

3.6MB
MD5

50e3629be819380e513647a4a4269044
SHA1

4e14ebc43d94b506c004dd5e77098ceaf99158fb
SHA256

c49b2a61848d3e404233be2341acb35b7db9644b23af759052011680129f0a1a
SHA512

b2163e62d3fcd6d94aadcc07819ee374081a16bc8cc51790000ba2d25c144ade922716306e79cdcd5b47cbd49ebe5ae33bdd2c483d6a673229b55173d840baef
SSDEEP

98304:7P+YOmIkr+XHy8bPWHOA2CCRdUt5vWQO7KQlK:72YOZm+iIeHj2Fmt5vgGmK

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c49b2a61848d3e404233be2341acb35b7db9644b23af759052011680129f0a1a

Files

c49b2a61848d3e404233be2341acb35b7db9644b23af759052011680129f0a1a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 535KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.8MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 73KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE