cf83c90bddf436366f688da659300621d43b7d019b9d4a323e31712a36e01493 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf83c90bddf436366f688da659300621d43b7d019b9d4a323e31712a36e01493
Size

358KB
MD5

4c3021cdee0d208038db3e1a542facca
SHA1

ae2e7b78fa61cfc85986ada7f1b98fff7def1006
SHA256

cf83c90bddf436366f688da659300621d43b7d019b9d4a323e31712a36e01493
SHA512

fbf9d75c0cd002a32a41d812782cd7e760814f3a9ae31632fbc9deda84dd26d9af4cdc11e769064f48d171bce3a5dd23e3893549526a017953e3f5541444bb63
SSDEEP

6144:4+RM9QggvYrBSzVDhJo/Id1e2rrR4/nlN1ONrK9zzvIcDFsnDCfJxVjnbMHRLTYw:uQfvYrAzVDX1fr+/nNO1K9zzvIco4zLI

Score

10^/10

Malware Config

Signatures

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf83c90bddf436366f688da659300621d43b7d019b9d4a323e31712a36e01493

Files

cf83c90bddf436366f688da659300621d43b7d019b9d4a323e31712a36e01493
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 208KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE