39d51df7176728d3867c92c1e079fcfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39d51df7176728d3867c92c1e079fcfd
Size

5.8MB
MD5

39d51df7176728d3867c92c1e079fcfd
SHA1

2ae0f020c52ad07c03ee09cbd32ab2208e994a93
SHA256

e8f44e187a204a4327d45b15eaf25caef13374d2e6404e4b68e955415d6f527b
SHA512

281692942f6c92f8a0a64b44c64b3c89f57c84ad9e951f70e8739d7a76db7c2213938246854fa9c60efaccdf0838b1773edd618322699e84c7bcc27f694ccd97
SSDEEP

98304:PhpvrXXp6vqFXxIWXFP+/1PUZseO0BoDmdaxE9E8oBdssTfvIJv0GmubRChhPRbK:5pvrnJSW6hUC7Deay9FasB2u9CXNQLSW

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d51df7176728d3867c92c1e079fcfd

Files

39d51df7176728d3867c92c1e079fcfd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 287KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.5MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE