38832dc032bb66aad9e3666c48ba22e1 | Triage

Sharing

General

Target

38832dc032bb66aad9e3666c48ba22e1
Size

654KB
MD5

38832dc032bb66aad9e3666c48ba22e1
SHA1

fae8dd4726064e9a736f6b39d412f116cea1748d
SHA256

e0909c67b42ebcaa6e09d5b9b1bd9d508a68fc55a34c0f0e0571fc017296e728
SHA512

740b8b5fe96c41a16417a557fd76b844b50d93b8088ebee83d512dbc3356171438e3d6c7d72d17add96572e721523bcaaedfc66ab51e79f8d3c71773aebba1a5
SSDEEP

12288:Ln/piRR0nUIR2TWf2UN4uv8tOr6a3lz/4pf8l96M8mDlUMt:LqbXGv6G4pf296gt

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38832dc032bb66aad9e3666c48ba22e1

Files

38832dc032bb66aad9e3666c48ba22e1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 573KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE