41591f726c206260289a22836a85352c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41591f726c206260289a22836a85352c
Size

39KB
MD5

41591f726c206260289a22836a85352c
SHA1

715cceb680c84da1579bee7e0006eb7187209eb8
SHA256

e34a676b21d53b203f1af007f6db0f24e4d33ff2cb512c5ecb1ff144a2ec1619
SHA512

6f140bee908e6bc5fc1f1342201a7ba7d527319280b2863f361851d562b3b0f977bf631b9e4ed36c400546f85440744623a66b004fd2dfff860133ecb90f4d13
SSDEEP

768:ZIHcYctKfX1cg2puY9sQWQrjpuR3IKuUhoFxs8Ns+xFha57Ptm:CcYctccg2PD1p9UhoFxs8PYM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41591f726c206260289a22836a85352c

Files

41591f726c206260289a22836a85352c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

BRAT0
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BRAT1
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BRAT2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE