738bd9a7fd7e05eb7938adb2d3be4131e81fb7f643124c3b8ba3d1dc6b28bce8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738bd9a7fd7e05eb7938adb2d3be4131e81fb7f643124c3b8ba3d1dc6b28bce8
Size

739KB
MD5

02e20ef1a725a41226b4b4e5b15bffa8
SHA1

ae08bcc170a291f1db4ff506b09691afe04d13b9
SHA256

738bd9a7fd7e05eb7938adb2d3be4131e81fb7f643124c3b8ba3d1dc6b28bce8
SHA512

8366a92c49890040420fb43afaf15b91d8b2f22f226e82cd072abb848269887228ad79b6a62dd886814136458b4a17dabf89ff27c7198f8f1f208b36781c7a44
SSDEEP

12288:dbUyYYajsD/xDEr0Mz5t2a18HR9Zkv061iaRgsg+RklclZTZu:dbUx0pYrHzP2Q8HvZQ06E6/OgZT

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738bd9a7fd7e05eb7938adb2d3be4131e81fb7f643124c3b8ba3d1dc6b28bce8

Files

738bd9a7fd7e05eb7938adb2d3be4131e81fb7f643124c3b8ba3d1dc6b28bce8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 379KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE