d60b41894fc9a5bd536910e8b1dd108d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60b41894fc9a5bd536910e8b1dd108d
Size

24KB
MD5

d60b41894fc9a5bd536910e8b1dd108d
SHA1

ac76cd86cddb83f309ecbb5d62338131ded1076f
SHA256

15f9bd3be28d07357592df0f526526fbf80140c3f641442cf5635a28217084b0
SHA512

a7c2735ef42fe465e4b28a733b783da76be8c63717bb3522dba70e859fdfc77f65884184ca21a4a61b169521e30653c415ba3f9f760186a2b404963f34d787b7
SSDEEP

384:SbUf/p9LHuAqSzMMn+uMISKN0ch2nlJQNt9mn5K8p7RCyMGRux8ctDpcw6GmAxW8:4UfTgfI0aGWtw5Ku7RjgGw6GRxZv7f

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60b41894fc9a5bd536910e8b1dd108d

Files

d60b41894fc9a5bd536910e8b1dd108d
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aasd12
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE