b8629527dd0167e6d137c24d4ab2d2e4c922ff5b7d1a6356a05bd44c6a7f78be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8629527dd0167e6d137c24d4ab2d2e4c922ff5b7d1a6356a05bd44c6a7f78be
Size

5.8MB
MD5

01507862b201bc45178e8755eb83cbb3
SHA1

ef14d7df123f43ae9a3d970878585aa6062939e6
SHA256

b8629527dd0167e6d137c24d4ab2d2e4c922ff5b7d1a6356a05bd44c6a7f78be
SHA512

4523bcc33ac6f80a97d8ea3e24cdf5d85005ea08110c14e10fd349b2bc23374650135af29df126addd76702af1bab91e6164815bbf40c88990a2c5c9ff062fd5
SSDEEP

49152:nDe1WF1sDe1W1cDe1W1rDe1W1eDe1W01W1NDe1W1XDe1Wlw:i1Ul1m11mm1mv1/1mQ1my1yw

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8629527dd0167e6d137c24d4ab2d2e4c922ff5b7d1a6356a05bd44c6a7f78be

Files

b8629527dd0167e6d137c24d4ab2d2e4c922ff5b7d1a6356a05bd44c6a7f78be
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. rdata
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE