048bd2285f1476c974df730cb79ef5cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048bd2285f1476c974df730cb79ef5cf
Size

17KB
MD5

048bd2285f1476c974df730cb79ef5cf
SHA1

7b05305b8d8b7e1aef56be1c7053ed1bed6bf6c6
SHA256

2194678bbb2404ea78c264411c8834e42ec6f342bec1694703a840076f78c86b
SHA512

da4c59e1ae45cbd4060847b2c85afee510a299ed7490786e432ce973f30a3e4747ffb64ed2b03a0d5cffebab9d3659aef599941f3f9b64e13fb2269c7a44cbda
SSDEEP

384:plee64qH/8nUGp6vtBo5NL7e6yypJ/0Ax8r6+S9Pfu7n5:D36TH/8UFK5NLi+xLdeV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048bd2285f1476c974df730cb79ef5cf

Files

048bd2285f1476c974df730cb79ef5cf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.000100
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0100C7
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE