dea827b4056a01742caf407ca3b1ac726300b0db851b59e48fcc97273ae03c16 | Triage

Sharing

General

Target

dea827b4056a01742caf407ca3b1ac726300b0db851b59e48fcc97273ae03c16
Size

5.2MB
MD5

bb910790d1311cd5796643aa479a6ea2
SHA1

27861d2fc7157c610a73550af4ab6b33029836d8
SHA256

dea827b4056a01742caf407ca3b1ac726300b0db851b59e48fcc97273ae03c16
SHA512

766fbb771bc996b51b9a10797d96a472d073d2b492e412265c7ecdcef1bb70f60008568bbb8dc53862dbe7061c4272ec91171bbf9dd4d047ce617cffc31536ec
SSDEEP

49152:7GLv+lSb0r13ms/cu/xJGt94NLEL7EtTHyhg+Z6f7JRyuGPFhkWWZ5f0fTb7fiVZ:o8Sb6eQNLihgwFhkXeTfiVZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea827b4056a01742caf407ca3b1ac726300b0db851b59e48fcc97273ae03c16

Files

dea827b4056a01742caf407ca3b1ac726300b0db851b59e48fcc97273ae03c16
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 531KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.5MB - Virtual size: 10.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE