5792ab38debc22293d5367712c9a248a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5792ab38debc22293d5367712c9a248a
Size

14KB
MD5

5792ab38debc22293d5367712c9a248a
SHA1

8024f5e2985fa32f37a0b983e893c6a2dca6b095
SHA256

5952d8efbee84dd467e03aa6ce006b1c16b32f31194b7e5970fd22d6f1da90bf
SHA512

fdfb55437c34e6edbee038d7cdaf56ae412b3d2085c27daecba0e72e366588712162b8aeffdc6a05f7b993a4fed089997698f4a766c95e7589147b4875e366f1
SSDEEP

384:/TYL8fvXhsqIb8hqmMi9S4FAxPr6+e9Pfqbn1RIB:/9pTIQAmj9S4+xeha5RQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5792ab38debc22293d5367712c9a248a

Files

5792ab38debc22293d5367712c9a248a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE