2d8063a8de777582c13a0af3cb254bf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d8063a8de777582c13a0af3cb254bf7
Size

35KB
MD5

2d8063a8de777582c13a0af3cb254bf7
SHA1

040d5a9007cff6df01beb2c323cad781c86655d8
SHA256

4c91eed91fbe3d7c4d1b1b92e9e18b44ad3ea57d4d88a138bd5f4bf2297aa6a9
SHA512

08a6b64b1bfda23d6cdae7ce964b4cfce71bf70aa8b4d282c2bf87f45730d441dda4cbc12b53b6fa3a31c1f3f878a2b1988e0bca7ae7fa1f55852aa8b3d519a5
SSDEEP

768:k9oU+WFgxCqoCQE4Flf6ELS6I1wtv1L2EYVB/xPdeVq:k9oUtg8qmE4/yD6Ig1L2EYVtX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8063a8de777582c13a0af3cb254bf7

Files

2d8063a8de777582c13a0af3cb254bf7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE