67ba0468f55fe030bc14a8e129b22e2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67ba0468f55fe030bc14a8e129b22e2d
Size

781KB
MD5

67ba0468f55fe030bc14a8e129b22e2d
SHA1

2ecd386819dabf82bcc61794202b3e5d3a2e8895
SHA256

e93c37dac1b7bb6ec537ed3a2340c20653160fcd669180ba43e61822e7c38da5
SHA512

5f9504490a148e2ba01bbed75abb03060632d924d764953459cf7572ae5a9148b01a83e3e8605b003a635f99156b7199e31420ef781f6481f66c6bdd83e1cc1e
SSDEEP

12288:HH/c5tgVKlJMg9FtOXc8768XvKEL1I9J8Y5Ljm67rGNrkty0fkhA:HH/cUQX9Ftoc8t43hErmyFA

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67ba0468f55fe030bc14a8e129b22e2d

Files

67ba0468f55fe030bc14a8e129b22e2d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 4KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.const
Size: 425KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE