6b21deab3eaa9bbdd6fa0e7eded0b404 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b21deab3eaa9bbdd6fa0e7eded0b404
Size

1.4MB
MD5

6b21deab3eaa9bbdd6fa0e7eded0b404
SHA1

43d92069bf0e4e1db181028e9494776b87927f2c
SHA256

e1df4ebeaefc7aa4118d1d7f6af17e8d11d73259642f67664897e20ed3c31b1f
SHA512

c6061d919252b6fab2731bc9304a6fede6936be651ecef4b1416c0cdb65ef99633ff1758a8aee6fe75d1846ff70e2d044662dbaf3f474be81d759c91b8261775
SSDEEP

24576:Ea1BtRP7rJ+NTxqIzCX3UkpA4Pw8DLP6TOc9Tl7mK08co5OyH/C9lTojbkZ5ZLB:NfdJ2xq0GEKw8DLyX9T1Dco5pH/tfkZ1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b21deab3eaa9bbdd6fa0e7eded0b404

Files

6b21deab3eaa9bbdd6fa0e7eded0b404
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 74KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Devon
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE