d577f9b495a072fd46be36e3d86a717d | Triage

Sharing

General

Target

d577f9b495a072fd46be36e3d86a717d
Size

359KB
MD5

d577f9b495a072fd46be36e3d86a717d
SHA1

f4721946ff61e0bb99d13c8c4c1c2c56fca64f7b
SHA256

9f569d5502c9ce76242cc3fc4df296da8c5d37e97368582a4ff4be179359532d
SHA512

bb889617332d31833e80becfa2649f7661c17ce7546c89468ec6b7d1401e8414897850cda9d40de7b489665e84e0312f09be6fb1a5be68af47c41b09e3ea4f88
SSDEEP

6144:NBP59nRl/9DpZf6+wAIUvqkeIzo2tBSW8+wtWhxewi4AX7ppyBu/w3mm71MIeE:/P5lRDpZf6xAVLeIsYBSWQMxe5pjyBuO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d577f9b495a072fd46be36e3d86a717d

Files

d577f9b495a072fd46be36e3d86a717d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 243KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE