70612366a2add5c4de981d097ee701e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70612366a2add5c4de981d097ee701e9
Size

259KB
MD5

70612366a2add5c4de981d097ee701e9
SHA1

3f3a58572481ac09c3f1f560da18739df8ef393f
SHA256

18ba9a3a0f14f703e12489e03af3d5e5af5be96d3ffc7fc3ced63e5ebafb2daf
SHA512

9ec6e21e7b29b840460c916a525a587d74f33a71cfc69ab0d39291a12bd211057be44f3d379560109e4383c28ac0d9ceaffce4c09128e8de9160f630bedbe6c3
SSDEEP

6144:W8Rp3T5cVSG3NXwMNli+25GD9gxcqoIkNAIXje260f0TBl0+wdRb:aVSs3lHxD9gCBIYXS2b0T3ad9

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70612366a2add5c4de981d097ee701e9

Files

70612366a2add5c4de981d097ee701e9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ykmhttfkniscbm

Sections

.text
Size: 229KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE