e135be3d42b8809ac1d2408f40ffe5f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e135be3d42b8809ac1d2408f40ffe5f3
Size

79KB
MD5

e135be3d42b8809ac1d2408f40ffe5f3
SHA1

8abe5a237b2746df27ea3e077b012046ee6fb3e2
SHA256

6ca83d66a2b59d313bd27a2347b18df64a09d789fc56ff1c88149fc1f9c2eab0
SHA512

b49110fd5fd49829cd4ec6e4a3764471b4b1a799fc0fb16334fd3b12fc7d7ba7aa7161e394c6c3bb5d287c9627b70a8107e5225af80402843ad31abe6e5c0b34
SSDEEP

1536:c3Bi77wAlPQzRssMm0tm0yQzRssI1bOJPqIaDBO9EKK8tgVuS6Z3EYX76Hcg5:c3Bg1lQzRssidyQzRssFaDByEKK8tgVN

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e135be3d42b8809ac1d2408f40ffe5f3

Files

e135be3d42b8809ac1d2408f40ffe5f3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ