117ba54dc890976778b81d4fbe6fe882 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117ba54dc890976778b81d4fbe6fe882
Size

3.1MB
MD5

117ba54dc890976778b81d4fbe6fe882
SHA1

a81c9f16777504e39cf0f7c00932032faa089ab1
SHA256

4fb865a3c4ff98f9f7d94196c5419d8e6ff2c4f278840cd83b755ae5701a3179
SHA512

080753239f5b51de8302605e8c70ace25b66037e2df77262352cd06fd81463fe17f98a678d5a92649d1a1687e5c674a3b0ebf2a7e1b298bdd9e723ecd079280c
SSDEEP

3072:Wl3SraepARae+DPpgwesnGBECFXazLpRCJz:23S+BaNpHgO6qRRWz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117ba54dc890976778b81d4fbe6fe882

Files

117ba54dc890976778b81d4fbe6fe882
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 14KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE