bbc932f9ffdf23d656887fb4c69683ca | Triage

Sharing

General

Target

bbc932f9ffdf23d656887fb4c69683ca
Size

324KB
MD5

bbc932f9ffdf23d656887fb4c69683ca
SHA1

d46173ea1b4f33150a43ff8ee4e5d1a6f90bb071
SHA256

79c5d2f53e5768b2fbf5208d57ec7510ee48f0040f154014b9ca8a8015776b27
SHA512

599ed79d2825339c28ba4d81da82289eb81f721d2e92ebfb30149487f487668c7893e1a6e726eb7126b17d5959692e1e2455363bde1a06ed12b2a37f58a52cc2
SSDEEP

6144:E5PV4OmO+V/K2n79JNRC/QZcL9mV0gQKWn8KyA6OYTURSqGAbGXNWB:4COmO+V/K0J4/QqL9mmqVbOcURNJCkB

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc932f9ffdf23d656887fb4c69683ca

Files

bbc932f9ffdf23d656887fb4c69683ca
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE