fa69f0e9a15ff95bca009e1db917191c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa69f0e9a15ff95bca009e1db917191c
Size

24KB
MD5

fa69f0e9a15ff95bca009e1db917191c
SHA1

d0bc50310d0de219898d35d0147ee300fc249971
SHA256

791ff6f497bbdd8ef7e4edf6b2ebc6b0b146b92e72619510727dacadd7b62377
SHA512

cb2e5df4038655ec8c694001fb7d2781ab8efcb95fdb125ea2f7202edaac434b2fe940e7005151a80898c5f87bc59eadb4d1a3f6a21ea6686bd9de08cbbb15d3
SSDEEP

384:9Bvz3H39aHvF4qxxc87lIrexCDACoaaaWbEQm2HwAxsr6+e9Pfqbn1DVx:Pz3NeF4KxR5DxCFohw2H7xbha5Dj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa69f0e9a15ff95bca009e1db917191c

Files

fa69f0e9a15ff95bca009e1db917191c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE