3fa070a0e4487e5c4962584c16e1b5d9 | Triage

Sharing

General

Target

3fa070a0e4487e5c4962584c16e1b5d9
Size

108KB
MD5

3fa070a0e4487e5c4962584c16e1b5d9
SHA1

6de3cd74b190ec584d0c87e367e2ed7d1aee7a5a
SHA256

410f9eebd99960b262aee66267617d382455af0ba60adbe0263e6dedaa250a8f
SHA512

6ba2d53b6bbc1ea225d8ed7bc8f5d948e665c281740e0c2fdc1be09ce97e1d4c8e91be04c0b58fc46a28784763c02cbaa13d0cb65b75193f12ae10549c862eb6
SSDEEP

1536:J/89vZvbZ+QsRqx2xOaqGfvh4x/2W3qwvdIvk1MD0qrIBD4CZW16rG0zJI:B89vZ7sRgsO1u0nawSMQ34S16Z

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fa070a0e4487e5c4962584c16e1b5d9

Files

3fa070a0e4487e5c4962584c16e1b5d9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE