02c75ecae8a7e026676235b03b3fb2c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02c75ecae8a7e026676235b03b3fb2c0
Size

194KB
MD5

02c75ecae8a7e026676235b03b3fb2c0
SHA1

365594484732b68dd7adab2eb13849929e36d85e
SHA256

e81a17fa56d053d276c0468a5e46932aa27b0d2456b35e8b4a8b5204be1d4408
SHA512

1c186054893dee73bae90aa395b1be8d643f555228b5919a34271e94ce58d0343691a63c69113d082ad6101ce55fbfdd351f98f3561333b2dc60299be8772a2b
SSDEEP

6144:XVIBLHyDYepWhROiVEJR+GdbzobU6Y0p/uwONct43Cs:XVIBTyDYeIqClGbcU6RpGHNu4d

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c75ecae8a7e026676235b03b3fb2c0

Files

02c75ecae8a7e026676235b03b3fb2c0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE