231e4c6269b316638e98cd8bd65932c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231e4c6269b316638e98cd8bd65932c7
Size

11KB
MD5

231e4c6269b316638e98cd8bd65932c7
SHA1

7b3848b7bb5d15a0c48dbe2ccbf83d8f9c97c178
SHA256

1cf4176931563c723788efbc151a1641ca3fa11b5abfdf4cf5e2f02aba6b64c3
SHA512

87ae861e9cff98e7e1cc5af50af0b8314f8612afc10e8fe59718f56bad9e11fab78a76cfda3c7dab403fa094b8f219343eeea0c527a0462bc25ab90d3d932cd5
SSDEEP

192:/TSGGmokcAiusnJbKEXMnbL5deDPpAx/wCMrpY7S8LqPZo5LdCfuR1nuO3sJeie:/TScFcABsnddCVwFAx/r6+S9Pfu7n52k

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231e4c6269b316638e98cd8bd65932c7

Files

231e4c6269b316638e98cd8bd65932c7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE