2749750fd69e30796140bf56a2a81820 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2749750fd69e30796140bf56a2a81820
Size

20KB
MD5

2749750fd69e30796140bf56a2a81820
SHA1

268aae8d6e8f9e0de94204becc78e16dfb1f802f
SHA256

a2ac844c029b536d8e7f280b395b66b21a2ac1682714e73183fee061a8353028
SHA512

db4fdf25c136e4b75df0296bbe3c1e78c22c4f2dfb1b837aabd22de3647b5458b925b96eaef21b25ed28cda161f8450fa20d30f05316535b3fc628cc243a4954
SSDEEP

384:bZH+QXNBhRoPw7wkye8oorEMUXtAx/r6+e9Pfqbn10EISbMfklb+c:bZe+NKfTLrnUXmxuha5f7wmac

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2749750fd69e30796140bf56a2a81820

Files

2749750fd69e30796140bf56a2a81820
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE