03549221fda4a7822a47b9645e5fb9758a8a0aa6186c2e5b49a224d2e6c985fc | Triage

Sharing

General

Target

03549221fda4a7822a47b9645e5fb9758a8a0aa6186c2e5b49a224d2e6c985fc
Size

42KB
MD5

78333e0d588a619627d36f75ed0ab4a7
SHA1

897408c761ea0d49be154f2e3f277b8e78ab0725
SHA256

03549221fda4a7822a47b9645e5fb9758a8a0aa6186c2e5b49a224d2e6c985fc
SHA512

0cbb427919d78cd8782fa04e94f554b5866611e6a678b0081fddefd5dead5501c2d43a84cd4719e658623e719382aa2e827f3bd36e5d572049c8b86c69f44330
SSDEEP

768:gyz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D88888888882:hzOCay4wV339rPjzbpLwRJ9pSdoIX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03549221fda4a7822a47b9645e5fb9758a8a0aa6186c2e5b49a224d2e6c985fc

Files

03549221fda4a7822a47b9645e5fb9758a8a0aa6186c2e5b49a224d2e6c985fc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE