ab24c06a28dab42dd3e50e55e1abfceb | Triage

Sharing

General

Target

ab24c06a28dab42dd3e50e55e1abfceb
Size

639KB
MD5

ab24c06a28dab42dd3e50e55e1abfceb
SHA1

1dae20c37e99ef3095c1db96ced0e926648b6e88
SHA256

bbe20f8870e2022cf5de2b44a8232be81cba0410a205e9f349d90b4ece86a5ba
SHA512

f3708151ce2efa05221f6b3b18ec6ac57ceab688dd36d47e30602ee7987313dd07d97c297f1d47fc63d0378684f4ecc7c0c7808f68fc41423ae1a1394b6b2186
SSDEEP

12288:PKTqa+UNh+NDfehc7kxociXH1WDQ7CXHARZdmZYOw:PKuNU0eh1xacMUAdmZYT

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab24c06a28dab42dd3e50e55e1abfceb

Files

ab24c06a28dab42dd3e50e55e1abfceb
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 612KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE