85ff5ce780ba9766dc9ed7f81c0deaec | Triage

Sharing

General

Target

85ff5ce780ba9766dc9ed7f81c0deaec
Size

65KB
MD5

85ff5ce780ba9766dc9ed7f81c0deaec
SHA1

83e00a2c9f1402f5baf3b34dea24b08639687431
SHA256

df391d156c99db2f9a772957c54439b9cca9f512ec6529d1cc2f016cb22ee7c9
SHA512

52655ad25f365438e8a96df189cc9d825f33cb9b3f74e6f0b8475e8314f320cd9be4c483e4bee3f7c2a15565fda8742bceefdcffab5bf79a1dc553e738d7593c
SSDEEP

1536:u4V4zI1OkLktKXq+tM3mUoMqUX3jpdv/aVJSQt+Ao:FUkeDmbk3fXuET

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85ff5ce780ba9766dc9ed7f81c0deaec

Files

85ff5ce780ba9766dc9ed7f81c0deaec
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE