1c6f59ad528aba2f2df23a161b34bde6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c6f59ad528aba2f2df23a161b34bde6
Size

574KB
MD5

1c6f59ad528aba2f2df23a161b34bde6
SHA1

e5670ac68204f09456a122fb5d90ec7af511cb84
SHA256

57393255dbf8c09e687a9b1dd1df57cd72b0c47edd12d92057e95bb0a6e7ae32
SHA512

9e2af4ce8d8466f9aaab432def24b74fd375dd1240740454806a35682e72c7026a043d0e5a09e144c364fdba3b4f2c617dbd4cc6cd511c8b4d0f288d02650e63
SSDEEP

12288:n/0mmLB3CthSURFFXbG38AN+AGMn7pge/ERneBLNIcs567jyZA:nMbLNGhSEFpGMWGMnpsAhzmS

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c6f59ad528aba2f2df23a161b34bde6

Files

1c6f59ad528aba2f2df23a161b34bde6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 313KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 121KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NBpack
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE