c2654fb6f27437aed694089c4f4f0e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2654fb6f27437aed694089c4f4f0e10
Size

24KB
MD5

c2654fb6f27437aed694089c4f4f0e10
SHA1

7a29d126b7366d4da69f1e6a8571e740adbb81b3
SHA256

cae9e581023938b3cc1d30e7ab1200b092e79d3ce17a8b4a503478c00742fb4b
SHA512

781d801092f14be840a7a860cda419227a6898e5bc5bdd8f86a9db55558823a79afbfad8089f150f881a9d9da41f08ae2b481f2b63759020666db207365238a2
SSDEEP

384:oACUqgirzwap/P3u1OiCCzpx/bqqyVakv2YV9hDTDJuyl3AxQr6+S9Pfu7n52U:otX51P3ubDzp1bhyVagF9hcaQxXdeV7

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2654fb6f27437aed694089c4f4f0e10

Files

c2654fb6f27437aed694089c4f4f0e10
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE