e0403bdac5711dc460fd181d7d44196a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0403bdac5711dc460fd181d7d44196a
Size

783KB
MD5

e0403bdac5711dc460fd181d7d44196a
SHA1

339e5b7a1a54707c0b2bb9e2b87f867e3989937c
SHA256

58e3f52a5362a0f0f76e60d92fe8a3b8e98f2a323b2bcd3fa57621c7db3bdb64
SHA512

99e19f26bc47d144da9b6988aee3f5169de070566667cc828d666205c57585f29bf0c654988871f911b04e25e789e5a60b0412f8230e34c99ad46546597a88b8
SSDEEP

12288:cVauuUoOod4nb+psw+9oBlsSXUfGY5rTEXJ+5w9s0C/aAbDRAMSdlvbQn:YlujSQUOssIGirTKOSN8tSd5b8

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0403bdac5711dc460fd181d7d44196a

Files

e0403bdac5711dc460fd181d7d44196a
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 362KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dota
Size: 408KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dota
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RiF
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE