9a1aaa66dde03d1415b434cf0ea2c208 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a1aaa66dde03d1415b434cf0ea2c208
Size

174KB
MD5

9a1aaa66dde03d1415b434cf0ea2c208
SHA1

58e6698d55f4654dbc7de9dcdfe6afdfe040a996
SHA256

6dac520dfa075ce3e41b6dd15f175b58aad8d05b33f58d8654f5005db4e1d375
SHA512

b9e18d0d42e002c52d99547affec16e7b5eb32fb090a6bd89705720ecd2019f99a457ef1dcfe074c6059bfff47182000aab49f55d39ee3723f7955db4f5e1610
SSDEEP

3072:Vr7eWn3FR3ZqzPs3CIvNUWfnDydJgbQcoNK9VpAtJdOj4Oj:VXTowC8UYCuPoNK9QPMj4O

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1aaa66dde03d1415b434cf0ea2c208

Files

9a1aaa66dde03d1415b434cf0ea2c208
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 104KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE