39f4f2fba54f983f5dc973fe87b424d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39f4f2fba54f983f5dc973fe87b424d1
Size

257KB
MD5

39f4f2fba54f983f5dc973fe87b424d1
SHA1

2d44be1a25e0acd016473f8f623da936ad10c2f2
SHA256

2667b844a2ae8d1294f3d1f468cec8c22a541d5d371230f4d7e3899234025a2c
SHA512

94686e0ecb906d6daa05deef1d8f9fd5e373d0ebe89d10cdc177f8c1f14d29079ce697884afd76f027c1b19ed495bcf687d772b230692890bf8a6b5fef21fbab
SSDEEP

1536:4rrh+rW192NlW6ojvCEMRkQNNx+y4bGbehFs2POHNbArcInk1FXkvJqnnrnnnQIk:cHvF+GGbq+HNbArZGgTcaKh8XShLyW0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f4f2fba54f983f5dc973fe87b424d1

Files

39f4f2fba54f983f5dc973fe87b424d1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

eurgtewg
Size: 48KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shgrhwrh
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fjuergvf
Size: 2KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE