483b4b6e25389271d458815580ade3a8 | Triage

Sharing

General

Target

483b4b6e25389271d458815580ade3a8
Size

116KB
MD5

483b4b6e25389271d458815580ade3a8
SHA1

79c3e398f14f40e3bddc64ace31fb6c4f445ec33
SHA256

3b5105df649bbf460b458bb1ffec617e9bdf4a3e48fbd81aaf27572805a4c1e1
SHA512

ec22ffad51a549b81317adc40edf1015faab576865564b3c824a16c58e8fbf7a6f90dc92de63224b0d4929390713e9da0624abf34e93d6c9d3a0b9f4e89dd3ad
SSDEEP

1536:S/TvNHwbrgo2xKAOW4B7vzSa3dZEjr1PfOew7Z1TjK/jJnCFf6IE6+rCrv:KNHwb0j2Pl3X4RfU1TaOf6b8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483b4b6e25389271d458815580ade3a8

Files

483b4b6e25389271d458815580ade3a8
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 72KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE