04f5944cab8a87960a5bf9e4765618f8 | Triage

Sharing

General

Target

04f5944cab8a87960a5bf9e4765618f8
Size

801KB
MD5

04f5944cab8a87960a5bf9e4765618f8
SHA1

0c77db6810ff953771e8803a405471afa0f07b21
SHA256

e2ed191f2333c9ae77da6ad623fae42db6dfc23eaf39bf9d3641fcc07b901616
SHA512

420b99f1582665711e16f5b5abdfc272aa3ad3bf1b4bd0016e4a20f088806fba74ac033cb7a116a605e6ec7ecd6f7100e6755608b5ceb6b570eba5fc1f02b021
SSDEEP

12288:z7oW9Varrqx7ig1MADwCuY/8y7k158YoLVMnkmd/Zzdf9Hwpq26Vxjl5T:z7oW9E6JvXcFY/8Z1/FD7zdlHwpoNl

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f5944cab8a87960a5bf9e4765618f8

Files

04f5944cab8a87960a5bf9e4765618f8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 421KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 308KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE