2c6cff51f3e9407e0d5f2428696346a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6cff51f3e9407e0d5f2428696346a9
Size

368KB
MD5

2c6cff51f3e9407e0d5f2428696346a9
SHA1

713e11245a75a0bf6508aba8064fccd2b9480835
SHA256

6c5913950cb9495991519621b3af4e4b5af0262c0f38ba75a914b092f0ca2493
SHA512

aaf34a8d9eab9edc54aa64539906800efd89ae40e93b342395614003463ae131d28377a22de0642396268b2575a2c2b47018d5afd75e73919e76ec2d8e1d22ef
SSDEEP

6144:TnLdhG6NGiPvSYX6le251Sg7pHgQTSVRMXfheQPhhHsG:bhzvSYXV2fSATiMpphZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6cff51f3e9407e0d5f2428696346a9

Files

2c6cff51f3e9407e0d5f2428696346a9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 267KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE