bb1a8c7dcc5c2e73ab86dbd67b7de306 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb1a8c7dcc5c2e73ab86dbd67b7de306
Size

42KB
MD5

bb1a8c7dcc5c2e73ab86dbd67b7de306
SHA1

2504ac8848aafe2a185b66c9a4a455ffcdcc0db3
SHA256

15175f8ced26164e7417a710053114a467ffe4f8113e9b052d153d03d1fd123d
SHA512

b6b58ef71072c99c27d0f389e65a303fac404c038ca1b74de3ff3b2773aaa66f71849614122029c5cb2bb42c5e067830a7b9d58ddd3640fdfe638cc323fa2e2a
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888x:BzOCay4wV339rPjzbpLwRJ9pSdoIQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb1a8c7dcc5c2e73ab86dbd67b7de306

Files

bb1a8c7dcc5c2e73ab86dbd67b7de306
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE