467a64f552b3f2434cb7a3d70e4c085d71b562ef18af957e84910c167d56bb72 | Triage

Sharing

General

Target

467a64f552b3f2434cb7a3d70e4c085d71b562ef18af957e84910c167d56bb72
Size

79KB
MD5

b68815b40176f3b625a16fb11b1c4d7f
SHA1

c00e8aced9152e2be8eaf4c327423255d8e096e5
SHA256

467a64f552b3f2434cb7a3d70e4c085d71b562ef18af957e84910c167d56bb72
SHA512

1b6f0c33ff3c1a28cff2136aa17ad6a0a030cfb381c2e6ecf33c20839d824252373533b9f5a9402e2fd44663fee17f20aa2e633164c86124348837f4e3ab2641
SSDEEP

1536:c3Bi77wAlPQzRssMm0tm0yQzRssI1bOJPqIaDBO9EKK8tgVuS6Z3EYX76HJT:c3Bg1lQzRssidyQzRssFaDByEKK8tgV9

Score

10^/10

aspackv2

Malware Config

Signatures

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
467a64f552b3f2434cb7a3d70e4c085d71b562ef18af957e84910c167d56bb72

Files

467a64f552b3f2434cb7a3d70e4c085d71b562ef18af957e84910c167d56bb72
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ