20694060c36525eb130c7b9fc797730c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20694060c36525eb130c7b9fc797730c
Size

32KB
MD5

20694060c36525eb130c7b9fc797730c
SHA1

3c3580066ddcbd267b952533194603037349cc3b
SHA256

6c087130fb1d19960865ee0527b5f39a8ca3af5aa122b02461adb3328798d0dd
SHA512

e8150d0262930872b7f2f54e1be8ef8328f5ee1a494c0cb6194159452aa03623f3a147788c00de2a971f5ae086fee486eed1631a7fa240fcf83dc6ab7ac7c694
SSDEEP

768:uxh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfxP:oZ/nEkh8OTKNY

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20694060c36525eb130c7b9fc797730c

Files

20694060c36525eb130c7b9fc797730c
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.ASPack
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPack
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ASPack
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE