66fb40a817454c3c7b5dd186fa0b9a78 | Triage

Sharing

General

Target

66fb40a817454c3c7b5dd186fa0b9a78
Size

42KB
MD5

66fb40a817454c3c7b5dd186fa0b9a78
SHA1

29ddb860e73e3e606e4e28371966d589584f5caf
SHA256

0d87d3d370f11474667f6e626d40c47759898391494907f7758fa19c8502a67a
SHA512

19df53bd523dcc1931aa497a0b268590a68395343cdfcaba3f17f83f5b67e78d1d6ee94bfaa0643cdc493afb290699954a93ff84b911dad2461b3984cbb3a4e3
SSDEEP

768:Bk3TMP8K0iKCJWT7AO0m3qAiGEO+fqYpKXW5LkzFow00XxWdeV:+TGJ0ipJZOzD9ETfqxW5SFh07

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66fb40a817454c3c7b5dd186fa0b9a78

Files

66fb40a817454c3c7b5dd186fa0b9a78
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WSPStartup

Sections

.text
Size: 22KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE