0dd635fb10e72b3fc1a7e1b3d834420c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd635fb10e72b3fc1a7e1b3d834420c
Size

214KB
MD5

0dd635fb10e72b3fc1a7e1b3d834420c
SHA1

9225c7111e6e0b349add68a1f8d7127a42e88cc6
SHA256

3e9b49a30f91d068e4fd4a94ee1cd6345edff959c58c3b7bfd3581b195bf94f1
SHA512

475e5bd7d7f46966b4abbfebf909297f96943bfdfcb84e039d440b0a4ed362396f8e9937b50f573095b44ad4e9ca622c6333824ba8f5defa4cac7121f9a0c1b2
SSDEEP

3072:GpidpuTPJD2HAR1YhyWQlxk/hHwOdcltIwH2MF8bYGnAp:GIdpxHAR1crQXYWtoMFKE

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd635fb10e72b3fc1a7e1b3d834420c

Files

0dd635fb10e72b3fc1a7e1b3d834420c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE