3d43f1cf9c9521877326e1a531f0b9a7 | Triage

Sharing

General

Target

3d43f1cf9c9521877326e1a531f0b9a7
Size

1.5MB
MD5

3d43f1cf9c9521877326e1a531f0b9a7
SHA1

d1c5a2a6732d463e485505c6ac9caf6f7014bdd6
SHA256

15cb82c73ff66d6180c8b7511021e1ad18bbd46b9dbe06f9304cb3c500c228e7
SHA512

779db149b5da54bd7bea9f1219d38ca4dbdcee7158631fd279a68a75566a0a2ae589b06208dc93a0da1302637a00a6ebd7011a3d33ecd2a67720bf7888a928f5
SSDEEP

24576:3AhuxfUmtmojIvBePS7zlBYwroTNdJYjtoQoms8PG8ts5SJAYYab1/fc:3AhuNaDpePS/vxrUvJ15cG8tssAA/fc

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d43f1cf9c9521877326e1a531f0b9a7

Files

3d43f1cf9c9521877326e1a531f0b9a7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 437KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 730KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE