06a9f7a8dc2f3a6412755bb2b59731cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a9f7a8dc2f3a6412755bb2b59731cc
Size

95KB
MD5

06a9f7a8dc2f3a6412755bb2b59731cc
SHA1

d60b1056d08b7c293650343c38c1c6c07e24361c
SHA256

0332713e0865ab3114c9bf2f49c209e8fdc848a8c5d02ce2f863e0ef047ba01f
SHA512

68405fa5ea44b4e6a3d853adc65333268e0d5aec65b8b7b5befe7132d5f6be7da7709379aafe7b0c5f3e40a22103af8fb89a145e52f317e6142d917c27fe9934
SSDEEP

1536:i1IbHFcaFgDqKZcS74+VIlRwXPu9ua/bFltjx+C5UZ9mx+l/9afoQ1TdLApN3Zlw:9bHF3gvZcr/lyIZlVp5UZ8x+LFkhMNpG

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a9f7a8dc2f3a6412755bb2b59731cc

Files

06a9f7a8dc2f3a6412755bb2b59731cc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE