12f67790d0cadbdec62b27f815648ffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12f67790d0cadbdec62b27f815648ffa
Size

35KB
MD5

12f67790d0cadbdec62b27f815648ffa
SHA1

461bcd9380911e3842a09a3d768afa88d2589498
SHA256

7ddcadd8405304807bc1496b142b20ade9bee3d1f08842183730b2c59215963b
SHA512

7ed6d7671310a3519a6c54b03286f1bbd4bcc98215cf29907a6158d7b24ed23407305a65eaa94f517a63105976cdfcb2fe5e4517770f883126dc8dd05851b532
SSDEEP

768:vb1A9ZfMoK/n18+F5loWHhsTsynh9ikIoChXn3Oa4mZ3x2ha5n:v2ZcF5loWHhLybikdChX3Oa4VK

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f67790d0cadbdec62b27f815648ffa

Files

12f67790d0cadbdec62b27f815648ffa
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE