688fa624d044a59910259f562c94ef43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

688fa624d044a59910259f562c94ef43
Size

42KB
MD5

688fa624d044a59910259f562c94ef43
SHA1

43198d3b2ef75e8db484bc28b5fe7d308ca5842d
SHA256

7df4fcb874d15e320f90abb855596fa864498fddddf6cb547b55e7ae148795e9
SHA512

410a8c064ad0aee2bdec5888834a019054c5489be5726650e7ec223cddbafc40c8fa5841681749d7b0535e9f4e2c3d81f1cc17f38d0275cfe3cdfabf16fde0a2
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888A:BzOCay4wV339rPjzbpLwRJ9pSdoI1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
688fa624d044a59910259f562c94ef43

Files

688fa624d044a59910259f562c94ef43
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE