a3026f7728ada8246d86ceaad997edbebbaf65ddc99de17bafe01029628a0638 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3026f7728ada8246d86ceaad997edbebbaf65ddc99de17bafe01029628a0638
Size

5.8MB
MD5

09edf966a4997ef503fd1046da2d09e0
SHA1

70fd66d48efc5b20c1457e9fde4d7ff5568cb50f
SHA256

a3026f7728ada8246d86ceaad997edbebbaf65ddc99de17bafe01029628a0638
SHA512

93b2fbdfe1a8e2e8528578bbc54b91559302f5e1d80a97e4365bee8ffbb7e3f3001aa0d90ae3b36af36c8b60b98cf792d0be90320303f455fb4e3c4e0a73e103
SSDEEP

6144:P3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXh0+cuXhFBM7xXYtyK2pdpS:P3TdtLW5WIj1YSSdFx1FxFBSXyz2p/

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3026f7728ada8246d86ceaad997edbebbaf65ddc99de17bafe01029628a0638

Files

a3026f7728ada8246d86ceaad997edbebbaf65ddc99de17bafe01029628a0638
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE