3c618147c3a9c5405a9b4c47e6240e04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c618147c3a9c5405a9b4c47e6240e04
Size

140KB
MD5

3c618147c3a9c5405a9b4c47e6240e04
SHA1

30c4494af6944b31137c3312f7e2a95d65a88b5d
SHA256

73fed9e7871877c6c019ec5882fbfe8de2c302dee14fabd9720f1e9e7459a78e
SHA512

01efca5f4b2b5025339825a4323d23b630fe28b381b2771a56874cba1614232f616088c44781adb9da7b9262fe36a4bc6f2a5f3944463a80cbb021faffdc80bd
SSDEEP

1536:OwwOjYcWRm56S24tNm2VYdrslZ8QraRmvCjQllsRUqk27OP9vXR1Tl/yBGJoqXAR:vWs6S24+2VSkpa0q0llo1OPJhKiKfai

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c618147c3a9c5405a9b4c47e6240e04

Files

3c618147c3a9c5405a9b4c47e6240e04
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 87KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE