18b6bc42bad255a08eb3a2a8ffaaca34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b6bc42bad255a08eb3a2a8ffaaca34
Size

134KB
MD5

18b6bc42bad255a08eb3a2a8ffaaca34
SHA1

c00a76af590b6d941bc3ac36cd6386645b76c66f
SHA256

d5e766b343b974cad099f52bf42d67ac31373bacdb5efdeaa228103f3edeeadc
SHA512

33f065dda5b3d17b9fdc4e737787ec2b0c6b23baef00a7212416b2f71e8b8842cdf4bc2a309f72ca17dcf38621b4a5f0383cf271325073cf0d545e16baebbd31
SSDEEP

3072:9hm858wIFFZ6l9ao9HVLyHPawO8LQJT3o/11SjFOZa3tuhs:9V+wTmCLd4uto

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b6bc42bad255a08eb3a2a8ffaaca34

Files

18b6bc42bad255a08eb3a2a8ffaaca34
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 87KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zub55
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE