4aa4974225371612a2ee4423a69ac89f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aa4974225371612a2ee4423a69ac89f
Size

357KB
MD5

4aa4974225371612a2ee4423a69ac89f
SHA1

1c7788d304c414f8a315f5cbdaa905a6609c72d6
SHA256

611fd3e2f68b9c9366d9efeda8e79ce303bad4562237a9cc604821202919929e
SHA512

630a116a13422c2ed7cde4719cfd06279f53e95a304f0bc2ddf274ca3fc0f3bf803825749fe2fcc358c72ae777b011bdd363ddd4a21992c17731df7e1df81cb7
SSDEEP

6144:g1X2DeFzoDZ1SpZYg+0JdWyQ23Tb2R0FyFiVPbkJZIJQ0woubljiO8:2X2CFzoDZ1WYj01rWRFFiVK0Q0wJZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aa4974225371612a2ee4423a69ac89f

Files

4aa4974225371612a2ee4423a69ac89f
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 273KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE