d3ad956f0416dfc38ca61d33630e35b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3ad956f0416dfc38ca61d33630e35b6
Size

25KB
MD5

d3ad956f0416dfc38ca61d33630e35b6
SHA1

8cf3d8635c5ff30144982c32ef962ba1850955bd
SHA256

d0916121046776a44d324fdeca162fc0042f6d46d59d36cc3b0a64aa5c1c6ef3
SHA512

57c70d8173f2cf4d0a11bcd342dde0aa235518b8911a92688a6bbb07e876b28958f323c7a33687d24f98872308fc6adf76091fef81d45000b7e594a2778bd337
SSDEEP

384:fIgDSymsTIis2b7DQJl6iZK4J90wv2wndaA1VDw/YJ4iOeFYPFAxXr6+e9Pfqbne:grxeBsSQ7ZK40g2wfDke/6P+xWha5E

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ad956f0416dfc38ca61d33630e35b6

Files

d3ad956f0416dfc38ca61d33630e35b6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE