a16351d700ec46d807402ce69f0b622e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a16351d700ec46d807402ce69f0b622e
Size

56KB
MD5

a16351d700ec46d807402ce69f0b622e
SHA1

7be85b056bfe09a4782c3dfb3648ee514430ccc8
SHA256

fc355693a0360daa0f822216aab7bebbad5923029b0c058c5420b8ed13a13ea8
SHA512

b59c1aab11efb9f48e83decc9ee011afb3cec8c5f4dfd247325e64099ac9c9b52481398deea46d632164b4e9f61c0a26f7165c9e8a399d8e065456e48c8034f2
SSDEEP

1536:dOfIGu8iwpTObrSy0MyfRDSWea09OeAqYqm2qV7:fB8Dgbiz4aTqO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a16351d700ec46d807402ce69f0b622e

Files

a16351d700ec46d807402ce69f0b622e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: 25KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE