89e3fcf78ee6adf150161dcf968cdc32 | Triage

Sharing

General

Target

89e3fcf78ee6adf150161dcf968cdc32
Size

575KB
MD5

89e3fcf78ee6adf150161dcf968cdc32
SHA1

c8e73d0992134fa1caa619bc0a516d0992bdcb8e
SHA256

8d7e1881b51aabc18d7f115d81670bb54db5eaa4ac7ff4b3ec7a02266270322c
SHA512

552e1ce73443cf23e3a2afdb43efd12f1e36cdb8c8134938611f3b3815a70cd290609fefe88c1005cc2f3ad58bd78bce5e2910f3d9185d5ee458b6aa329e3282
SSDEEP

12288:0bwxo/yRtdBcbkoUQEk2Ehrs2gyhUbDXWHVzrG7i:jxNZEU4hI2VqsVmi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e3fcf78ee6adf150161dcf968cdc32

Files

89e3fcf78ee6adf150161dcf968cdc32
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 266KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 70KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE