5a83f5ddf10d7333dd18348aa93e2203 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a83f5ddf10d7333dd18348aa93e2203
Size

862KB
MD5

5a83f5ddf10d7333dd18348aa93e2203
SHA1

1d9973a3101f7e4ea2408829a16ae5c0904afee3
SHA256

22be9f09b84f84c90bb961db5236e21d809ed779930eea6fb540a0e318c1334c
SHA512

df96427e59f65fb1860b5bb6dc82c7e6537388458f3a7ad20231c093280eb131259c2c11f7ce7fb2e7617bb707e3d8ab0b05c120ae416062182b5d9002752ca7
SSDEEP

24576:nnkqkStgbNwaH4bS+yA/47JE0MOsikCtH47tFMWJBdr:nnknarS+yAwJ7slCN47tFMW/1

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a83f5ddf10d7333dd18348aa93e2203

Files

5a83f5ddf10d7333dd18348aa93e2203
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 248KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 460KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE