a14bec01b57f2d2e1da2c194953dc9b8 | Triage

Sharing

General

Target

a14bec01b57f2d2e1da2c194953dc9b8
Size

711KB
MD5

a14bec01b57f2d2e1da2c194953dc9b8
SHA1

de032e8b52b107f122d84db45fdb5ced40d3111a
SHA256

dd7510fbe85a2b330a4c57e4536e835bd0117fd5f2602947b07312e11e297b6d
SHA512

f65136e1e23e0d4dd6da6a4629523d0d044796d3d4d92adf5cf1e372b6ea83e0bf5a53d172ece5b0a08946f5d97452cf119659b48741f929734fca4334e166ac
SSDEEP

12288:MP0vaRX0HpqF/vpsZWL0yynZ6bz3Jca5Uqcz+k6:0gaRyWgWI9nZ6/JYn+k6

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14bec01b57f2d2e1da2c194953dc9b8

Files

a14bec01b57f2d2e1da2c194953dc9b8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 212KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 185KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 284KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE