ddff20276c487d07754c4a71b66d79222e96df83e36d6b65c5c90d510616c1de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddff20276c487d07754c4a71b66d79222e96df83e36d6b65c5c90d510616c1de
Size

3.6MB
MD5

5db10cf7fb60490b5a80718fd0801528
SHA1

d90a899f93621b456fab4a1c3ad441b60f3ce8db
SHA256

ddff20276c487d07754c4a71b66d79222e96df83e36d6b65c5c90d510616c1de
SHA512

565e5448e3d71b42f34e7271560e453a7a8c7bef9bb1303a1fee6f04b650098e5f31b54b1d3bdae3ff013c0f2e84b481fddcb47847294678ac114f79b9c1d9ce
SSDEEP

49152:HJDrt8Hvt6LBTlSLQ2cmxsorWiWxEHp0pupl+JJB8dPobAGiYfvaiJ6OYx5RxU4Z:HJvWoLBRSLZbDvWyp0pgTdPMFei4Z

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddff20276c487d07754c4a71b66d79222e96df83e36d6b65c5c90d510616c1de

Files

ddff20276c487d07754c4a71b66d79222e96df83e36d6b65c5c90d510616c1de
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE