d4e3fd992af6f1ae9fea8a66b9d0c2a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4e3fd992af6f1ae9fea8a66b9d0c2a5
Size

107KB
MD5

d4e3fd992af6f1ae9fea8a66b9d0c2a5
SHA1

2a915c4477be021f2e9bfdeae9452c18064e5aa2
SHA256

d5550302e6c84aa70791eae2fed7ec7309c802f24759fc40cb2958b142fcbdca
SHA512

c8f4f5b8f82fbeebc40075cac5a03a4a428f8035e134ceb177028b8311fa5ec4842168907066bd7136145202344ba0b5a7631e7d2c75dcdab8c0487561de2bf4
SSDEEP

1536:4FfjTU4x5MH/0298BL3V9oAZly8JyqiK6ilxZp6pR2duAYcjUr86c/Ai8qHinUj:efPU4XLTBLP5Y8+K6ilG/aUJcUJUj

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e3fd992af6f1ae9fea8a66b9d0c2a5

Files

d4e3fd992af6f1ae9fea8a66b9d0c2a5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE