56668e27e7deaf1e07c578dd51079e71 | Triage

Sharing

General

Target

56668e27e7deaf1e07c578dd51079e71
Size

49KB
MD5

56668e27e7deaf1e07c578dd51079e71
SHA1

5bd6f896a88d1fd3a43c3722b06dc2a1f7bb8405
SHA256

71154a442250101d220d3d1dd94e5a86fe3d09572007e34f874b2e91db9e1369
SHA512

0830d6d18f37872a0e953d9133b35a9565ed326a72b6b51774121670e2d530944afe60f529052e92f9696bf4d3a7b17e259df4e2ec94488fb1eb9bf1fad3fe86
SSDEEP

768:sJIeJtaHpYnJlQB9PKkZ4Ol+dj+PBfmcECcA7r+DTd5f7yHhYwGjGFwaUWpN6ygh:Kv28+jZDc6gHvO+VZ71wGXWus3s0WJ1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56668e27e7deaf1e07c578dd51079e71

Files

56668e27e7deaf1e07c578dd51079e71
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE