97ee06c9ed74fd5a2759a7ff0ee925fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97ee06c9ed74fd5a2759a7ff0ee925fc
Size

52KB
MD5

97ee06c9ed74fd5a2759a7ff0ee925fc
SHA1

9d170c162c13d9e10f50d498c6412d05c69257ad
SHA256

2df889c8eb089b3d12075696b0de6ceb80e204f72281955a157e7333f599dcd1
SHA512

f9c5df9d91b50323ded79f8d6aafab243516dca2a1f9548245e78f230a764f99bad83986f159d2efd3e234beb2da275f4c30d16d685ee12b7c2e1536f46b6d58
SSDEEP

768:QXpIkwm2ZtixmK7QXTKyoYowj+sNo5B7u29ZfLwA/ORS4u9UtYWL2p7L:QXppjWMxtQNFjjkB7D9Zzwj3u93o2p7L

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/S-INPUT.EXE	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/S-INPUT.EXE

Files

97ee06c9ed74fd5a2759a7ff0ee925fc
.rar
README.CHM
.chm
S-INPUT.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
下载说明.htm
.html .js polyglot