4dcaf5c24abba8d10782c20d6761bcab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dcaf5c24abba8d10782c20d6761bcab
Size

32KB
MD5

4dcaf5c24abba8d10782c20d6761bcab
SHA1

b84e0b5151c1fbdc88c2e8ddb1681fbe8f353683
SHA256

978a7b89818ebb249e0f3598303c531bcc4d03acf51fda22293106ed8e2b7790
SHA512

93131c471020830d326f1b92438f7294b0d85bf49bdfe109e3643b17e79e758433c6a6fd33c1413c77ccc48a3b480fc06495f423df46cb53662452b02fa88c2e
SSDEEP

768:rGh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfKIVn:KZ/nEkh8OTKNx4

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dcaf5c24abba8d10782c20d6761bcab

Files

4dcaf5c24abba8d10782c20d6761bcab
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.ASPack
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPack
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ASPack
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE