393bc41cdf46ab070cbe5ac84054bbae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393bc41cdf46ab070cbe5ac84054bbae
Size

58KB
MD5

393bc41cdf46ab070cbe5ac84054bbae
SHA1

595ea618e811e9470a49021f5610b56bcec2dc1f
SHA256

07ba7a650e2ab182842ff0a88d846003d2c28b55baf4cb76f58cb7a446b08bde
SHA512

4297b0bccf040ea3496da10d7c1ee0ca17d49956f6a72e348da58d04035ab32dd9930db723ab4d0d964867dbefc04880bede15c01d4ace811987a86a5026fac8
SSDEEP

768:xHCawTV+1yzPwNPFD/bWQ6zucprwbvmQD5Nd3E9KbPmU5wdf12W6GHix6deV5:xiawpu/bWdy8rwbvXd3EDkbEY

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393bc41cdf46ab070cbe5ac84054bbae

Files

393bc41cdf46ab070cbe5ac84054bbae
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE