341150a542dbf9cdac9bc9969d81e747 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

341150a542dbf9cdac9bc9969d81e747
Size

81KB
MD5

341150a542dbf9cdac9bc9969d81e747
SHA1

3caa4bdafd5c8385fd1cef12d4837076350354e4
SHA256

791c1c868e070fd44d890e8f3112712745e6b4dc640c973be553a6d17646f716
SHA512

954b917b73f3ab12fbcb3f250fc72dcebf24c104c6cdf53ee8afbdf71428d83a6b3c32afcfab5c5d3d351eb57c294907c5e1a5d3b4c7556377c6208f0a97660d
SSDEEP

768:ZKMGXJv4fd24BbB9Fj9VKcB7a63g0yEIGP6ZAxHgKhQeVKIxhha5ON:QMCJv6l3KcB7a6g0ygPAAVgFH8hN

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
341150a542dbf9cdac9bc9969d81e747

Files

341150a542dbf9cdac9bc9969d81e747
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE