3cc8db27e00952aca53d5fb308e0306d34233e7070d7976d79d996c01dbaaf6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc8db27e00952aca53d5fb308e0306d34233e7070d7976d79d996c01dbaaf6c
Size

3.6MB
MD5

b654c0d592949cbb9d1e4b6e97c0e44a
SHA1

32971318dc108b44c06e5a4d002520e3ecdb5490
SHA256

3cc8db27e00952aca53d5fb308e0306d34233e7070d7976d79d996c01dbaaf6c
SHA512

bb4b4dff640b4233e3ee26d9de3790480eef4a646e1d434f9102fac4f312e6f90931bd32d4ee58368dd777b2141b3a9fe64b6aaa87d4e4a05697624b3bd657e2
SSDEEP

98304:MGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:AekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc8db27e00952aca53d5fb308e0306d34233e7070d7976d79d996c01dbaaf6c

Files

3cc8db27e00952aca53d5fb308e0306d34233e7070d7976d79d996c01dbaaf6c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE