e0b9937b88402ff0821ffa6eb867b9f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0b9937b88402ff0821ffa6eb867b9f6
Size

42KB
MD5

e0b9937b88402ff0821ffa6eb867b9f6
SHA1

ebdf289b5d579309f6236c4046c0fa159a870439
SHA256

35fb90e121be87f4c6825b4ef95cc8cf27f6c3ec642aeac80ecbd5e170045c1d
SHA512

f4a4302d6539aed59703cc69fdcb2780ebd0073180c7cb993d25ae882a2966d6fca4c924c02490e3d9671e6110964afb056743cb5b30a7c77aaeea18fededbad
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888S:BzOCay4wV339rPjzbpLwRJ9pSdoIL

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0b9937b88402ff0821ffa6eb867b9f6

Files

e0b9937b88402ff0821ffa6eb867b9f6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE