473d4e19499a0c3a49a6b29618207516[.]bin | Triage

Sharing

General

Target

473d4e19499a0c3a49a6b29618207516.bin
Size

918KB
MD5

473d4e19499a0c3a49a6b29618207516
SHA1

debf68b43d20a1cd0872412571a11a24986aa032
SHA256

e185bf60ff052d7572a056f5af194a1319daffe11c57f4d6b250db1f0c1ee4e3
SHA512

49848b7f00977d2120b6231b3daf23bc206ede5b760c345680b9298fd8eab48acab3f00ad53b9f568f2160af9625cea2374f7f91fe2dfe190d260e4fed3de769
SSDEEP

24576:yOwzs2qIlDH02VTURw1cDgA/F1IVp0xRLLBJm:Lcs2JHRVQRvKkVLj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
473d4e19499a0c3a49a6b29618207516.bin

Files

473d4e19499a0c3a49a6b29618207516.bin
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 676KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 122KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE