c25eba681816a1eca0ebde0205d7f07e | Triage

Sharing

General

Target

c25eba681816a1eca0ebde0205d7f07e
Size

870KB
MD5

c25eba681816a1eca0ebde0205d7f07e
SHA1

088bb4ddd1ca0ca184b14bc9f0988b95472d72ba
SHA256

f239373a2bab3ebde72ac4a2919e5ef9fe2c868cc467166d0f8f47479dd347bb
SHA512

5a5a7178353f9c0934bad6baa0b906cf88fb480b13ca0873d7b18d8b081d41235941efbccc3eb5ec4dc05e3c503abec4d1b86e57fe444083dff66a3d6190c764
SSDEEP

12288:Q1Y1NniPcwgW6Qjit+5ubPiupkr016DbxxoPabxyi3koOx+5kUw8:CYUcl84PWQWbxqPabtU

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c25eba681816a1eca0ebde0205d7f07e

Files

c25eba681816a1eca0ebde0205d7f07e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 517KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE