c62fe491af63e5634e5fc02c7010dd52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c62fe491af63e5634e5fc02c7010dd52
Size

71KB
MD5

c62fe491af63e5634e5fc02c7010dd52
SHA1

ee64864d12ff70cba276f7588434f6b5794b7587
SHA256

79f51fa9b9bd29668da261e116e73ce518764e428e67f1675a61144160e79812
SHA512

d0fafe115712fc940b319ba6e715d149b7aa290f32a0102f6176763e7795f73837c3e1a6f5855c1513fb17e3a738e48fae79ad251465bf36ea943a4a807e5e04
SSDEEP

1536:ldHw1hCjwN5qN52icswP02pVjIMqEjiU8wRazQ:ldHw1YHmbMzzELfg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c62fe491af63e5634e5fc02c7010dd52

Files

c62fe491af63e5634e5fc02c7010dd52
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE