1513835d2a800c25738e483c3d4da5005071841660bfc970a57797a193a45cce | Triage

Sharing

General

Target

1513835d2a800c25738e483c3d4da5005071841660bfc970a57797a193a45cce
Size

712KB
MD5

c7b5cba02513de4a8479d4afa29b3fed
SHA1

b542af122b01f7ac056f900b09d38b13de857b39
SHA256

1513835d2a800c25738e483c3d4da5005071841660bfc970a57797a193a45cce
SHA512

0ac8cabfd2bce5499620a39e036007ef12c6f3548456b3e0ae465d2203f6d78c16696544448268619dcc5640d4fa77329ad7c0f8382dc64011011076312c9e25
SSDEEP

12288:Pfvvzli4FUSFspBCzNM9FPLc6nujcwT+j9OhcwEXxmwYeLTcBJ/jeqm71YwVey8J:PfnlUSOrzFPwcwT+mcwJeLA//ja1YwVS

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1513835d2a800c25738e483c3d4da5005071841660bfc970a57797a193a45cce

Files

1513835d2a800c25738e483c3d4da5005071841660bfc970a57797a193a45cce
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 344KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 3KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 271KB - Virtual size: 38.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE