229e3c9a676583c774245f00ffb8ce7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229e3c9a676583c774245f00ffb8ce7d
Size

56KB
MD5

229e3c9a676583c774245f00ffb8ce7d
SHA1

475bb5b8140cac794e9ec79989159a753900ac9b
SHA256

786d80590234081cb92d6b6a00f63ab6495589aaaf8406dfedecde351637fb7b
SHA512

1f245fc31550cedb5eeb37fdac64073415848f785844b645854bba9f8c50c3147d75ebf4de006f00bc243530a52b0c35c1501dc6da7e9dbdf54defb84428daa8
SSDEEP

1536:enRi0Z+BgIGWPnyaueWRzr17VJt1Axc7h7XPJeit:iUhmeuzrf1Ax0Fxt

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229e3c9a676583c774245f00ffb8ce7d

Files

229e3c9a676583c774245f00ffb8ce7d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE