548d9a895b59430d208eaee795dc5fa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

548d9a895b59430d208eaee795dc5fa6
Size

185KB
MD5

548d9a895b59430d208eaee795dc5fa6
SHA1

80e1696f7f847b43d3257c3019860edba2aa6aa8
SHA256

f2e7a6a9c838f6c974c2cd443bf31eeea74d21e1b201281b742cdbfb28974cba
SHA512

9f2390924fe05c228d1d8be10bf7ee9bec82d5b3fb5249a86dbd5ee4391db5525aa48f042ff8725652c5710c70d05a400cca87d34c0f5904e9da23c0f6f49532
SSDEEP

3072:sOvJmr8csI+dvt0fE3zmFAyECmpn6baEd6EbTudKQsvEYtdYdoo3PVWW1:/BmaxdkEwtmldEdl/ud+sYAdZNL

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
548d9a895b59430d208eaee795dc5fa6

Files

548d9a895b59430d208eaee795dc5fa6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 57B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE