4982867d690dba82ae33db0c123c796c | Triage

Sharing

General

Target

4982867d690dba82ae33db0c123c796c
Size

46KB
MD5

4982867d690dba82ae33db0c123c796c
SHA1

d48937174155aaa6d96de5ab9332f849f68a0a12
SHA256

e0fc8618650aeca5d08382d17c9603add95c0d40d5f200b4645e2275ee449fd2
SHA512

b76b39f88fc696a26153951b0011d328a5523cd130996e8b03f39084c2ca854341c2be9bf8efad808e0be9f4bfe6171ee2132eaae3e0e21f87f14aca46aabe3b
SSDEEP

768:C9c07g1ZqWwS+W8aSCr4XBMqUTh6K8YgOrfAbcD/cMDALNDRGYzh0rJGjJxJLoI:CxsqSHr9qMvAboZMNRJzh0rJG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4982867d690dba82ae33db0c123c796c

Files

4982867d690dba82ae33db0c123c796c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE