407c03afd63e3ea24e3a59967c4807b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

407c03afd63e3ea24e3a59967c4807b4
Size

20KB
MD5

407c03afd63e3ea24e3a59967c4807b4
SHA1

5987ec72c42a5286845ce2a59cff357ecf14c8b1
SHA256

db8ed187c143f51f30558e4ebc5e43c7c969dc7751a22b99c26bdf5bbb05324d
SHA512

0ba79ec53dca111e0852dfda625fee8b88e5d54af42a29f097c7e8cb91dbd5fb0369b78e2bdc0119d77f8f6b9c2f5bfebd38035699e94389be1b841dd8ac3bc3
SSDEEP

384:eS9gKuHBPKy1JIOZV5fOBNyRUAgKHlcAxvr6+S9Pfu7n5r/c:ejNnJDZDIyRNlPx+deVj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
407c03afd63e3ea24e3a59967c4807b4

Files

407c03afd63e3ea24e3a59967c4807b4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE