78d38716b66cc6b504afa5cdd70176ff | Triage

Sharing

General

Target

78d38716b66cc6b504afa5cdd70176ff
Size

10KB
MD5

78d38716b66cc6b504afa5cdd70176ff
SHA1

51c5625212af62cfced3a26abcb518384d09023d
SHA256

f7dfdb281ffb41b098528c296de8a1ac1cde704f7d2c9bec9b2ed6341bebcd4f
SHA512

a221651a21452a5a8afd07afd9351f12afd9013c6583913838394c4e1f69371686d58fc495a11a9a5cb5ca09e151a988158d7a5b48d077fb8a6ce662621522f0
SSDEEP

192:2LRkoH+qgS4PeAxfwCMrpY7e8LqPZo5LdCfq1Rn6O3cvi:zoeGrAxfr6+e9Pfqbn1Ii

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78d38716b66cc6b504afa5cdd70176ff

Files

78d38716b66cc6b504afa5cdd70176ff
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE