3eae72dcb3680444beb30641162682fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eae72dcb3680444beb30641162682fd
Size

87KB
MD5

3eae72dcb3680444beb30641162682fd
SHA1

350ad9e0851fc5a573aa9dd5a1653c9056c59e76
SHA256

9d7e22b604c89d5e9cdd29ee58ae6568d51a716b22b7ba2312de5e02c41eb7b9
SHA512

1bb75a4d162098ed41e87ed8922969995152501260caf9bdc05303ab32497d6db8f518063ab573d5c823dea9b31b10364d2b509a8dcb1fee0772dd82b7061d13
SSDEEP

1536:cK6tg7nUgJl0bDmTTvaI/N9UqUPq1ypLiHDFmnNOdx07gZ1OZaOWfCYH:zOg7UgUnmTTR+q2iHDEC0maal

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eae72dcb3680444beb30641162682fd

Files

3eae72dcb3680444beb30641162682fd
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE