4abde5974b493355ebbd269c78c02ff2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4abde5974b493355ebbd269c78c02ff2
Size

109KB
MD5

4abde5974b493355ebbd269c78c02ff2
SHA1

77e569eea70e4cb20c1c9520f6dc00af0074da2f
SHA256

ec12baf3acb9e75c7fe46f72b2fa7577e980109faf41d5b45307756d610f77ef
SHA512

68b1863706f9905147973277bf68ed9322d71685e03cbec22b21588970570a94ac9cc943c4d428928a82619c2252059860e5353abd3cb57e0649536a06537720
SSDEEP

3072:6PmkvbXTXVX9ngsx3upxkNo6Wm7ib6zzw81:gbjVtnlxyxGo6I6z1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4abde5974b493355ebbd269c78c02ff2

Files

4abde5974b493355ebbd269c78c02ff2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE