d3afd0efcad80429b23edd95f5584f06 | Triage

Sharing

General

Target

d3afd0efcad80429b23edd95f5584f06
Size

634KB
MD5

d3afd0efcad80429b23edd95f5584f06
SHA1

bb42021004e0386b829b2b1344704d3b2423cbac
SHA256

1b0b4c580117fc53bc42dd2284cd2cbb84a2cfbcfeead7e5e1b87aa5ddb99a52
SHA512

9619d17db83b3572adad0286c2f3090db16d2e24d89b4685fc0af05827c85305e169d705697366f93b140351a699fb57a4a16fc0d72cc89bb5d53e98592e369e
SSDEEP

12288:9Czf4KykFsZ/i2ZElHu/sASlUJiokSHxmD7uXtR2cHtQEi:9CQKMZ/i6WHYPM+WSHxaGrt

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3afd0efcad80429b23edd95f5584f06

Files

d3afd0efcad80429b23edd95f5584f06
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 241KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE