5f0360005b9237b37f94f021458e651f | Triage

Sharing

General

Target

5f0360005b9237b37f94f021458e651f
Size

43KB
MD5

5f0360005b9237b37f94f021458e651f
SHA1

89ec739380811161ef1f5ccd609cdb69ab7f1785
SHA256

e6b0333c1f871bdd507ffde76bdf09e6ac16f54d3efd7ee7e48fbacf0cb8b9c6
SHA512

aa2f16dc9ab23d68556e9628247547a939c4a7b020229d774a7461055d8aed8f9913e08ac408ec4a51498554bd102be3b366bf72df95c5808477e91a9994b9dd
SSDEEP

768:xlGztxZYDUDst4ma6VuQgYTF/beUUiFOKsKcdsgJ4ArR5pZaVjzwpLLlxWnGex43:BDlt4ma6VuQgYTF/OkU4AdJBXxWna

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f0360005b9237b37f94f021458e651f

Files

5f0360005b9237b37f94f021458e651f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE