639657163f06bebad0ef1b426254085c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

639657163f06bebad0ef1b426254085c
Size

70KB
MD5

639657163f06bebad0ef1b426254085c
SHA1

6a3d3238f2ce71a15677e733c1a873e7ffdb3a81
SHA256

6ac18a15dc77165e645f1e36225cd7508a6a8849c470fd52f23539b080187440
SHA512

f4a3bcfd9ec6c85c8112dc2fdddb6bfd1f13b18059b28d09bae46986589fe45da20c47974accc8cd423975fa3bdbcd09990f7db8ba8e5ca341ab8513d35f8370
SSDEEP

1536:C/9cvu6osTzqZmc4n2+K9zmKOlWaAfuXRcPU7ow46c:C/WvuMT+9v9DOwaAWBN49

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639657163f06bebad0ef1b426254085c

Files

639657163f06bebad0ef1b426254085c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE