5c2c22756aebb9dc2e1052c70355ac4905c421eb4330bc7d2322dd5c48033a35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c2c22756aebb9dc2e1052c70355ac4905c421eb4330bc7d2322dd5c48033a35
Size

6.9MB
MD5

58d5f67fb5b3290f00b15afef70fe962
SHA1

69aa983c12832cb87823734151eeceb792cd8be9
SHA256

5c2c22756aebb9dc2e1052c70355ac4905c421eb4330bc7d2322dd5c48033a35
SHA512

e674177357e397c37e5778d287ee8fa288b6240d18ab9687f1bc9e6ba75f216cccf1d617b39d9f4686d7ed861f7b00de727913dfeaf5512c5d380eb9896a1128
SSDEEP

98304:k2PiV+hMxS3ktREF0/uw0cE/QxA3rg/go/aqz4eCLoUmOsXpPjyuzpYuwjKkLP08:k2DM43kMFR6gtIJ0mOwxjLY9n05uX9T

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c2c22756aebb9dc2e1052c70355ac4905c421eb4330bc7d2322dd5c48033a35

Files

5c2c22756aebb9dc2e1052c70355ac4905c421eb4330bc7d2322dd5c48033a35
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 378KB - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.9MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE