0f463f61ccf6b6df53d5f6e3b6a900a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f463f61ccf6b6df53d5f6e3b6a900a3
Size

1.3MB
MD5

0f463f61ccf6b6df53d5f6e3b6a900a3
SHA1

c8e9637f5412187cf4765cdfb2dfcc6754a2c552
SHA256

1b41df20c02a87895828649af269a41e311465bfa269f962fae723a227239c88
SHA512

c1b5bffd27ef7ee037e5cb4c5b0805c543ad6b37ef79c21ccb60ef00fa22ff84cb20386ba0af425e10c62b83da136ddd3f754c2f9fffe8079c08efcaf4d2e63f
SSDEEP

24576:QEvlL2V28OkdmhUhS6tgQGPL2WHYUgjaQn2/Pvs6l4vCcKGwe7:QEvlL2A3Smig6t9G4jd2U6KPt7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f463f61ccf6b6df53d5f6e3b6a900a3

Files

0f463f61ccf6b6df53d5f6e3b6a900a3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 999KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE