471d26595a360bb79b965dbfe9519014 | Triage

Sharing

General

Target

471d26595a360bb79b965dbfe9519014
Size

107KB
MD5

471d26595a360bb79b965dbfe9519014
SHA1

0cb61dd636d68720152bf4f1a4d8929fba1f1cf5
SHA256

e6107bd49c73ae6858b7cda1e4e309e5ce6cbac9fc76896e9cdb3b54192f3d3f
SHA512

6c1104d6f649313b46a30d3bef66496dc1f752a7a526f26593f8b029a90203f3ee81110fee455005dc2b5884fd6df3284856ee386a918009b79f6b6042105020
SSDEEP

3072:gD6cb3Om2nNv4cSN42x7+NCq5ZIf4ZtzW2WyEB5Vr:E2nNv848Si0tjsBP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471d26595a360bb79b965dbfe9519014

Files

471d26595a360bb79b965dbfe9519014
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE