3591e9972149393ce5292b6b4180d1fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3591e9972149393ce5292b6b4180d1fc
Size

79KB
MD5

3591e9972149393ce5292b6b4180d1fc
SHA1

fbae9d57e467c48d2a86f8f39607c020aa499e85
SHA256

46fde49d60903b1ff85d1ffcbb85a16f9e9e184551df53bfd581e1bc44e55dc3
SHA512

9ba22c47f034ba650ad3a0630a0add9052b022c63c579212fe3bc0e54ca7287ddfc5b9f4b672465e16265fbb751a14cdc2acbe6d2f3b3db5d82a02add96b8928
SSDEEP

1536:fZ/nEkh8OTKN7mg5Tf9u8tBykdbFWLyzYzCcWj+0lK:5xhTKNagZfYqykdi6cWikK

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3591e9972149393ce5292b6b4180d1fc

Files

3591e9972149393ce5292b6b4180d1fc
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.ASPack
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPack
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ASPack
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE