898fca0a8503309ce028d904a3f2aa75 | Triage

Sharing

General

Target

898fca0a8503309ce028d904a3f2aa75
Size

648KB
MD5

898fca0a8503309ce028d904a3f2aa75
SHA1

9a2fb423a71910e04aff48ec736cd3f4259fdc55
SHA256

32e391cd316b2310b5d6c0226f54d5f534027ca12bf1a6d6cceaf3daebbf62c2
SHA512

002113a0df082bf7ebbcdf38af1fd7f272063bce3ffe1042ab521b43241d6bec2c80614e0ba140d64513b36c6e6974c1a37a7c8264f8e756e0da74ee7cbb87d3
SSDEEP

12288:zAjq4FpXdEQVyDLYRx1DOkl4vF4iPlAVrV2nc9dnbPk41Cfu4Pc:8+mXmtLYRKkI4ilAV0nIRbkhflc

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
898fca0a8503309ce028d904a3f2aa75

Files

898fca0a8503309ce028d904a3f2aa75
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

test
Size: 391KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 241KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE