aca587c7d243536f1fdcce5b5cf2a342 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca587c7d243536f1fdcce5b5cf2a342
Size

33KB
MD5

aca587c7d243536f1fdcce5b5cf2a342
SHA1

743ab27ff600bc015ff90bb77106968d3750251f
SHA256

e03b81d59d7d7a3c20266402953e33b5f2281fad63d1e21438c9e1e14d76692c
SHA512

494d70eca03f01fe7a55d6b02b18a004ad9578f375fe2bad48e23982ada9fd5620cda65e357b6be7cb782dfaffa1d9628a68484dd2e4b938f4bd79372a879add
SSDEEP

768:ulcCvEKTuUTInLSVpB276SaNUOozkvbDJbm1IuV7YxfdeV:qv/Tz0+RM7aNhozG1mdg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca587c7d243536f1fdcce5b5cf2a342

Files

aca587c7d243536f1fdcce5b5cf2a342
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

8e40lpMb
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2nO2Gabm
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

L3Dh8tF8
Size: 3KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE