6452e3c7d51483e365e0cf2406937e5c | Triage

Sharing

General

Target

6452e3c7d51483e365e0cf2406937e5c
Size

65KB
MD5

6452e3c7d51483e365e0cf2406937e5c
SHA1

78590fb5c630adad7db52dc061ea4acea2cb92cc
SHA256

42cf4ab77c06dacffc2c892e75e5f71e1a996c2fb1782c204969db214e5364ad
SHA512

f686e1b09872e9819c48e5f4f6e4b8da23a783f1652050f928604ea202f467fa2e250be84cf4f361c96bc8a43eb8732f4a21f49bb0bed458fff3c805a0a8a977
SSDEEP

1536:wF8PsIFzczDMfzFDcuptiiocWr9+lXorkshL:wFOrzeezNNptDxs+xst

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6452e3c7d51483e365e0cf2406937e5c

Files

6452e3c7d51483e365e0cf2406937e5c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE