3ef64be6be610e4763612e329720b249 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef64be6be610e4763612e329720b249
Size

16KB
MD5

3ef64be6be610e4763612e329720b249
SHA1

b70a6e724f5e3c99c06d72fa49546d3806ef2d8b
SHA256

76e08f5efecae0594f127e7052645f20cb4237ce009476f06c271de679a9e62d
SHA512

85990d59cb91ad5706379089208bc4a3d4c5c00cac55b2a5630aa9391f11b94c4c313ccce8dc6031bd4a990416afe0c07b7895d1d0f81a8d04e51901002db53b
SSDEEP

192:RcH38Ui+2hqrINL6RTWhV03PumAxGwCMrpY7e8LqPZo5LdCfq1Rn6O3:Rct9teVAAxGr6+e9Pfqbn1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef64be6be610e4763612e329720b249

Files

3ef64be6be610e4763612e329720b249
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE