511b3768c098966ae0c9cd2c5430dc50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

511b3768c098966ae0c9cd2c5430dc50
Size

11KB
MD5

511b3768c098966ae0c9cd2c5430dc50
SHA1

985019cbd9a38591c01bb02e02984a880c5cb985
SHA256

65d86408e6ec907eb7bbb9ae6abfa485dd073e129703b5c21fbf5a52b897af4c
SHA512

d2fbdd9b702f46aceff47047f5592ce7cf6f1e3d19ae7c4b4d944eb2434f22b74911e96b7ddad60047bdedbc7302181cafaa9e3b4b87f4ba6d944d6e9b1d3ea3
SSDEEP

192:/Ts+dYcQhaQPewPbAxPwCMrpY7S8LqPZo5LdCfuR1nuO3sh/f:/T1ehBeWAxPr6+S9Pfu7n5C/f

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
511b3768c098966ae0c9cd2c5430dc50

Files

511b3768c098966ae0c9cd2c5430dc50
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE