ca8bae3d9cdeecdaf08fecef139f8803 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca8bae3d9cdeecdaf08fecef139f8803
Size

262KB
MD5

ca8bae3d9cdeecdaf08fecef139f8803
SHA1

73060abeae0c7c12e83e1ad7c30b20ef4bcdd4ff
SHA256

1f6104d644ea40379e446d6b3b8287057bf41daf97bca3d441aedaace4e5a807
SHA512

9657ca765e64e95bda4e751c2aff397ab8e38cfa757c0a3a4809384e6b00b730b10890b08bf5e4172a74b4c6a403c274696ec75c8bd6a6559d5993301f6f0519
SSDEEP

3072:d8SnVEBLayscxjJZ16SdNt6174Q8eD0FZk78z1aXMqLvIP75rTTK/h4KtBfqXKP+:dJAn6SdNUQ28UDETTq7xPRU3Pd

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca8bae3d9cdeecdaf08fecef139f8803

Files

ca8bae3d9cdeecdaf08fecef139f8803
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 105KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE