b40af1fa24fcf6a7d08f16a261adb68d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b40af1fa24fcf6a7d08f16a261adb68d
Size

2.1MB
MD5

b40af1fa24fcf6a7d08f16a261adb68d
SHA1

716464137cb9e91a647b344e327d7e7342662397
SHA256

91f4050acafc38126626e2d7a4f77f48193265ba3912e0664b9527b6d88e5785
SHA512

01f18ad546dd07e1d38515a68f3bfac42896fe3b96a2aa6f550ee6fae5767031bcd73828bd001fa2172e723494b7ea17d51856d9fb0955a3cf4684a7ca6eabd6
SSDEEP

49152:FfnCWlIssZLi5lKr+Pw3yd2OluON4fA9u:aGU

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b40af1fa24fcf6a7d08f16a261adb68d

Files

b40af1fa24fcf6a7d08f16a261adb68d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE