2c166255efb87395a2836d12c195b49a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c166255efb87395a2836d12c195b49a
Size

62KB
MD5

2c166255efb87395a2836d12c195b49a
SHA1

7660bf64f4c7f632a1953023341e498a8d845c28
SHA256

c2bfd811eeef4625cf65f1fa3f76760e68250798760465d5e962b9cb8bf9f503
SHA512

4369c2f8f6be3fa7ed94b830586aa1ba47522ffd095c725c15cca36459781d7286e416dc5e47172ab26cb92ae7018a3186f9d80cbdd5a0b8c74e4de76c473b75
SSDEEP

1536:ojEACH0u/8kU3ruoq2LfgnBYRKYdFYFlF9hFvXj:ZUuhQZLUnBqKYdy/F9htj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c166255efb87395a2836d12c195b49a

Files

2c166255efb87395a2836d12c195b49a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE