3048c4cc9f95d730f124be48b3ef89a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3048c4cc9f95d730f124be48b3ef89a5
Size

62KB
MD5

3048c4cc9f95d730f124be48b3ef89a5
SHA1

beec38525b1131d856300cddf62117bb268fb37e
SHA256

e38981cf31416f265822d36adf0546daf281f95a680a62c4f3c3a9a1c483b60a
SHA512

c663fc61b2e100276be3522785618e8a1f60a4d3e8739f7555d5790be3df6059e9d8678e8ed84aa3ffaf41b180118f8be1030d2184537d8fe52c53ab841200c8
SSDEEP

768:xK8L1zr8Z24jV94JKzQY7hVfYTxKhMH8gnswR6yXKkOHKrf91xBdeV:xNLtr8Z2S9SYTniHs1fkOI

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3048c4cc9f95d730f124be48b3ef89a5

Files

3048c4cc9f95d730f124be48b3ef89a5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

exeStealth_Add2eNgine
exeStealth_AddNewDecrypted
exeStealth_AddNewEncrypted
exeStealth_DeleteAll
exeStealth_IniteNgine
exeStealth_Run
exeStealth_SelectVersion

Sections

.text
Size: 36KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE