1a3fd50ff35b6739e86d39b0f0ed258b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a3fd50ff35b6739e86d39b0f0ed258b
Size

254KB
MD5

1a3fd50ff35b6739e86d39b0f0ed258b
SHA1

4a5e06b7e9b77820f7da215156fafbd46e293c8f
SHA256

ab2592dc9fbc45b5b354ad43d982fd199a8680a909aa80e06e95dd5a4ffa985e
SHA512

b2c1818a87a3814589dd05fa0365f5c408de920a812635999eab249cb715b861c18190143621ce3f691d59b4ac0f0f6ab10f9f17552622a94606267b47c8166d
SSDEEP

6144:+8YESvm+5c8kKCEFtH59FvBkeRg2THfz6NZ524BV0WPHTfuWWI5G/3oq:+8CmVKCUbFvBkmg27+9jSROE

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a3fd50ff35b6739e86d39b0f0ed258b

Files

1a3fd50ff35b6739e86d39b0f0ed258b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 198KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspahn
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE