59e690f92d0d4f027984b6bdee1b2900 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59e690f92d0d4f027984b6bdee1b2900
Size

289KB
MD5

59e690f92d0d4f027984b6bdee1b2900
SHA1

9ce878dd2b19bb9998d7b6e6cbc46c02b4905ba2
SHA256

b049d3c20c562c7df45202261aae2ecbd4f2c82a8e0af9103be45afb3f32a160
SHA512

aeb0626c8587930bbe70e5c220ab753259a7a01647abff5dfc4b91783124fa9f4bf8ef4e9f55ffd229c1c0e23aba2c9803cd70ca9c8b6c0c558b67eaee62318b
SSDEEP

6144:wWYwEoAeTrIjXy/jhAsvs2gH0SY9Ah8Rr81TgR1GVM3BC3uuiA+Duf:MwEoAeT0X0jyOsRh8Rr81c/38eRA+D8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e690f92d0d4f027984b6bdee1b2900

Files

59e690f92d0d4f027984b6bdee1b2900
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 244KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE