50d7c3e10ea3a8e97c146fa30b0ed9551503e07cc51e549d6e47b1e7dbdf6e46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50d7c3e10ea3a8e97c146fa30b0ed9551503e07cc51e549d6e47b1e7dbdf6e46
Size

3.6MB
MD5

6eb11f9f9c3afffcb5cffab5c6576b3b
SHA1

8c7d8d879ecc708760b046ec65bc1351af336a11
SHA256

50d7c3e10ea3a8e97c146fa30b0ed9551503e07cc51e549d6e47b1e7dbdf6e46
SHA512

17c06e699681f500ae2eae7781ad7c90727d0642c3b6f7454935e9ab9b4716c40618cc187696114b69df80b9a2f7c84d183fa8f9c2e83f7f3fc3948e716c797d
SSDEEP

98304:gGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:EekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d7c3e10ea3a8e97c146fa30b0ed9551503e07cc51e549d6e47b1e7dbdf6e46

Files

50d7c3e10ea3a8e97c146fa30b0ed9551503e07cc51e549d6e47b1e7dbdf6e46
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE