0669bd0acfa627aff41337358e408780 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0669bd0acfa627aff41337358e408780
Size

65KB
MD5

0669bd0acfa627aff41337358e408780
SHA1

e5458d3d82e8afdd2138f5575535f857a45d3c71
SHA256

6c83b42f22c3db26414a97c53f7800abb4d005eb8e01c685782a737e8fd3d6f4
SHA512

4171f7959c0ee58fcd97198039134e907b57bafec3f96b2a3b005b9193e9a0c3ce0b51fb98e8c58906e2a799c88c0c9f6b7ce3fbcca3dfcec6529f5477a74931
SSDEEP

1536:y/2yuLRdUrb42yzseloWLfgnBYRKYdFYFlF9hFvXj:yu/ddelyrUnBqKYdy/F9htj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0669bd0acfa627aff41337358e408780

Files

0669bd0acfa627aff41337358e408780
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE