aa0d86277441ab819c7f56bb76b7433a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa0d86277441ab819c7f56bb76b7433a
Size

23KB
MD5

aa0d86277441ab819c7f56bb76b7433a
SHA1

ce1a81c43bccc50edd27937d436c08dca9e9cc34
SHA256

fc01457be3c1bc4c550a8741a9220086444e69bfc7f3db29160b9f072b925fcf
SHA512

8df8a31d2231fe038d974423ac3deeb66fab24bc6525e989ecddc409402407d145c568bde13ff0133ec30a0405c3da08dfb05eca8c8c19ed1c30f35559e9f07f
SSDEEP

384:hYL7lAr9kFuhdKk/w3WQfiyuBn2oEIAxvr6+e9Pfqbn1otLlXOX:uJFsdKkAOyu96zx+ha5otLleX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa0d86277441ab819c7f56bb76b7433a

Files

aa0d86277441ab819c7f56bb76b7433a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE