318a3504f7feb3b3e2a481d30e8a75121da75104786caf4ceda00e3cce6afc5e | Triage

Sharing

General

Target

318a3504f7feb3b3e2a481d30e8a75121da75104786caf4ceda00e3cce6afc5e
Size

146KB
MD5

d02437766c10699f143ebf048a0d2070
SHA1

4db045610ca9762bf9e74a3cca13a59989239976
SHA256

318a3504f7feb3b3e2a481d30e8a75121da75104786caf4ceda00e3cce6afc5e
SHA512

eda8291b7916d2da3aaad05d52cb3f370a72a9732da8a3fcddd197736e8975ba8881ed49ca9bd142abd555198a761574e16ce668b3ff2c4366cd43ffddf69b7a
SSDEEP

1536:86zGGiHWgQvnC1IWD4QXGYjrUyisrYcpdbGkCzIzR3RSToWJnwMGanZxFN+:RiL1mQXDSCdseZoTojoxD+

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
318a3504f7feb3b3e2a481d30e8a75121da75104786caf4ceda00e3cce6afc5e

Files

318a3504f7feb3b3e2a481d30e8a75121da75104786caf4ceda00e3cce6afc5e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 47KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE