991686c38e4bee9f49cefc7dd5628b70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

991686c38e4bee9f49cefc7dd5628b70
Size

870KB
MD5

991686c38e4bee9f49cefc7dd5628b70
SHA1

bced6994de0533a67709bccf8d433eb6483d67df
SHA256

7ec25462f4ecccbd0fffe3d2ec30993101714051098d818d8bb15a23179746ac
SHA512

9d3b89d5fc245d27b00467575255e0e2dcb72d5deb0f8dc2a0ba895771d015a355e81dea4b7ba433913b17e2ed485fa8ed2a4e730baaa918f24243d9eb87a9af
SSDEEP

12288:B1Y1NniPcwgW6Qjit+5ubPiupkr016DbxxoPabxyi3koOx+5kUw8:7YUcl84PWQWbxqPabtU

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
991686c38e4bee9f49cefc7dd5628b70

Files

991686c38e4bee9f49cefc7dd5628b70
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 517KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE