14df018ef529c57d075a0fa97ec37f1e | Triage

Sharing

General

Target

14df018ef529c57d075a0fa97ec37f1e
Size

28KB
MD5

14df018ef529c57d075a0fa97ec37f1e
SHA1

5d1f477d3f5c50f9acbb955f6b993f187efa8fbf
SHA256

8a46728affe7ce08a0d839c64e65b20c9a5bcf826a7ebcfe1f50dec9ec24b40f
SHA512

c407c9501ba4aa55d75d879cbd1f0a08e386727276b8a6848c45fad20f442cbda08be3e956827fc17ee69c74928bedec74a95734790468df4daa9b3cc71b4654
SSDEEP

768:Gj4Q2T/vUEVYJtNp8dS75s8XWcBZ7vxrdeVgQLN:X/c8u8s7DBVG5

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14df018ef529c57d075a0fa97ec37f1e

Files

14df018ef529c57d075a0fa97ec37f1e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 19KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE