0c526ed55bb116117377bff81650fe68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c526ed55bb116117377bff81650fe68
Size

188KB
MD5

0c526ed55bb116117377bff81650fe68
SHA1

279b2295a5f4c1f9e8058a83b71355f409e128b6
SHA256

792c7474ff0d0fb5abece14857a495da6c25f3f6328682ed428c155283570603
SHA512

7ea0db67bbea9b6a204d4792297f4e7a39b70c7568f462d5a2c1f87ea36b16befe90e8ceea95bc4f4a21641829d08231584475f3fe2097fa6eb55435f8771b10
SSDEEP

3072:7ke4cTxE7+q91OzNN/eGzX2UMGZPFmBp0wpXGS/C/ypQZzw3Nud4y7+RPwD:7v6751EFes29HXGyC/LZsttq

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c526ed55bb116117377bff81650fe68

Files

0c526ed55bb116117377bff81650fe68
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kiwi
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE