532ad543155701a9b68c195d2bc4d695 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

532ad543155701a9b68c195d2bc4d695
Size

135KB
MD5

532ad543155701a9b68c195d2bc4d695
SHA1

65c7c5fee549506113b50ceb0135ecac461156c6
SHA256

81875376492dfabde64b9ab6cb73811e05ac04f1bfd838e142cf2e8b83794428
SHA512

a924cf1c1de58900221822670758c777769c7bc57ef46802874ce7b8d17719be8213ac2db8fd676789e65165a45201e6040daf0231a1fa323b6e55a317cf87cc
SSDEEP

3072:gMCPPckdXRDBIq4XjCgB6/UGtqIig0rIE/I0MxV9Qf:gMeB4XjCrqrga/Ilxcf

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532ad543155701a9b68c195d2bc4d695

Files

532ad543155701a9b68c195d2bc4d695
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

PEp0
Size: 60KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEp1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE