5972aa2f83f90a3fa13bddef41c8bc2e | Triage

Sharing

General

Target

5972aa2f83f90a3fa13bddef41c8bc2e
Size

141KB
MD5

5972aa2f83f90a3fa13bddef41c8bc2e
SHA1

53036f8319cfea665db96b614ecaaaaffb4c010f
SHA256

af1b3ee5421bb49b7e8ea4b3a2460e78190c05c5bdbf873d3174ea55f811f73c
SHA512

818c08a14a070fbc283820b6aa5cdf181f1794d9c6bb9baae8bc702b40b91e4075127a2fe6f059619a3d73bb48c7e1f57f8f312cf58cec2cd545e5edf6b0669d
SSDEEP

3072:lI4cxQQBNDUjkhN74CaXoO+yt8xZNKdRQleE5oBF5Hcp:SDnNQjkTBCR+mQZNKmeE54Fpcp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5972aa2f83f90a3fa13bddef41c8bc2e

Files

5972aa2f83f90a3fa13bddef41c8bc2e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 92KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE