c43a57612bf508a6479dd7a12237b3fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c43a57612bf508a6479dd7a12237b3fb
Size

61KB
MD5

c43a57612bf508a6479dd7a12237b3fb
SHA1

20c49726ec2cb6941fd1faf4881866fc89446e8e
SHA256

3cdfd81149be9d8f04541c291fec749f01f94f7599bcad77e9a1bf76cba2c049
SHA512

4e8fe2db6323edc797cef9cf5033b3956b70249e065a6dd5574973842eae201afb05fdc861c516ed2d961001077a5be1bce17517ad6c047e77c21ce78e89beda
SSDEEP

1536:47r90DkrPFRWi6hz6ycvBAuEazAfVVHs8/:4XkyFR7qz6ykOaMNJs8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c43a57612bf508a6479dd7a12237b3fb

Files

c43a57612bf508a6479dd7a12237b3fb
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 55KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE