ec40a55a329c6c412ad56ac02dacb691cfcf2d8e61982c93bed0509e2037143a | Triage

Sharing

General

Target

ec40a55a329c6c412ad56ac02dacb691cfcf2d8e61982c93bed0509e2037143a
Size

36KB
MD5

a2de072f1b83ff8a112997c120b01e4f
SHA1

09a4c04d4c1f2649b8620cb241745fb54fe0921f
SHA256

ec40a55a329c6c412ad56ac02dacb691cfcf2d8e61982c93bed0509e2037143a
SHA512

f902eabb1e039b49fd66857effe5cd0e08eae76c9a40bb3e188a2092da70b321b9afb385debc3142eae90e87ee009860e030a4c137fc5a94dbb680b20472577b
SSDEEP

768:FVF3CeLEWGlxOv7fvTQzRssMmP8tmP8yQzRss3:zFtEWZPQzRssMm0tm0yQzRss

Score

10^/10

aspackv2

Malware Config

Signatures

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec40a55a329c6c412ad56ac02dacb691cfcf2d8e61982c93bed0509e2037143a

Files

ec40a55a329c6c412ad56ac02dacb691cfcf2d8e61982c93bed0509e2037143a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ