b9813b0ca8ee65c0cde06ee5d630494161d348699a402f7ebe1620ba125523e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9813b0ca8ee65c0cde06ee5d630494161d348699a402f7ebe1620ba125523e7
Size

3.6MB
MD5

43e66c23df0ae71ce1637a7aec95cf11
SHA1

fe724cd420110a2910f4571cd831450a4b8b0772
SHA256

b9813b0ca8ee65c0cde06ee5d630494161d348699a402f7ebe1620ba125523e7
SHA512

f2fe3003bcf62afeebfc377bc4554916f3000bbc8eafdc1ee5635daf6ed5a507a9702d234b89c2f0329d6f317d06d352fdac459bb6499dfbdc6e16a2c3992f34
SSDEEP

98304:+Gpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:eekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9813b0ca8ee65c0cde06ee5d630494161d348699a402f7ebe1620ba125523e7

Files

b9813b0ca8ee65c0cde06ee5d630494161d348699a402f7ebe1620ba125523e7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE