8f5b9d1ee2b10e237f09bcbfb303016c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f5b9d1ee2b10e237f09bcbfb303016c
Size

71KB
MD5

8f5b9d1ee2b10e237f09bcbfb303016c
SHA1

d0cf80a4823c76e8ccd0c4366ccf72aabcd80e83
SHA256

3a279149e4397e21b3b91867b646b5abcfef8e490b16bbf61e50723ee37a4926
SHA512

3b0cecc99276189041dcf9124dc603098406042ef551313b406814e06d9748fe78ea69b6ebfbd86624b5b52d00c8908db959323fab7fd3f5cc1b15a43922e674
SSDEEP

1536:voOghkEShkaip1h559A2cHsiZipdyrlLakR6frTn:vxHEKw3A2cnwaLan

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f5b9d1ee2b10e237f09bcbfb303016c

Files

8f5b9d1ee2b10e237f09bcbfb303016c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE