05bb765866c97d00b0fe0bfc97a5a9d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05bb765866c97d00b0fe0bfc97a5a9d8
Size

575KB
MD5

05bb765866c97d00b0fe0bfc97a5a9d8
SHA1

1a6a5f3404c71c90476a69c553ae87db3bca6037
SHA256

6bd666e65d173698f44f97fa39ec9e1038ba1de84e054114dcf94b6e3943d553
SHA512

aabade070fd5eb71ffd1e3e268faafad957db194e651d979c8bf61a298831884fdafd4e748bfb9951e5f1433b8c0d9c0587c138dc5119760884c5f5726f87790
SSDEEP

12288:Mm9nYsuPcXVB8Tt8wPxPtFI58thMn/F5WU0gbZ:BnWxekP8Cu/fWA

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05bb765866c97d00b0fe0bfc97a5a9d8

Files

05bb765866c97d00b0fe0bfc97a5a9d8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 312KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 121KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ubpack
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE