3c479a68664f6d5e03242334768bd138 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c479a68664f6d5e03242334768bd138
Size

42KB
MD5

3c479a68664f6d5e03242334768bd138
SHA1

f67fc27804c6dd9fa74b61a55e97e95b42634896
SHA256

8c0d1d45c8853cbdb261d6238cdef4eb80ebc01e60d82d4dd0aa79d25de71f71
SHA512

926fd37434c62bc8a7c114b600484b602b52ed87eb6fd6eff621cc16539a97c2e47d8ca086a146e2a4c48dd7c0e64030af26ebff2788e219ebedf264b78f5e38
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D88888888885:BzOCay4wV339rPjzbpLwRJ9pSdoII

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c479a68664f6d5e03242334768bd138

Files

3c479a68664f6d5e03242334768bd138
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE