e1868bf96e97884047d42e91ce39a444 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1868bf96e97884047d42e91ce39a444
Size

658KB
MD5

e1868bf96e97884047d42e91ce39a444
SHA1

6b3f6508d685d0a0f5cf45052dd964a59953f4a5
SHA256

dde3a5b9d9aa7d49fb54d5d1565c586d93055238ccf72f60c948deb3f4bdf59c
SHA512

039758431e8522567d316765663e0617ddd0ed1b834dfa79f3196ebba171a0148f4898dcdb03944cd9bf3ec13a31df64372d5e0c9f143ce15f28fd7f53572a96
SSDEEP

12288:GjA28XvWivmIXhA7YCgpkvOn0qqK0a+VH8TDTJTVosQXQmWOcN:GmXe1IXC7YCgpiOn0qQ78TJW7QxOcN

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1868bf96e97884047d42e91ce39a444

Files

e1868bf96e97884047d42e91ce39a444
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 477KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE