158fa746b2861cb8071f17821f453be1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158fa746b2861cb8071f17821f453be1
Size

367KB
MD5

158fa746b2861cb8071f17821f453be1
SHA1

cdbf8df1a7dd40ea7a221ee459f8d066a59c1067
SHA256

81886e6adb07598407c4856e929e7534464c0d1e10b3f91aeadb51217d588972
SHA512

3e316a307e36c1300bc3ffc7ca855ea865e98f00677e64b6a7edd5d6af381d5f8c09605e1170af0ceaa834ead1bfd2a8aa302172adf3f033f45029e45cd293c5
SSDEEP

6144:rnyBl9VN4RUhuluyXoNQYje4jidE716PF68v/pcv6xRFjPwJWB9RNnzgwE/C8y7d:rnyBll47AF64jii74N6rgbjYA3l9E/At

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158fa746b2861cb8071f17821f453be1

Files

158fa746b2861cb8071f17821f453be1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 282KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE