ecce96a5f2f3016cf240f208256b7faec73e0496b5bcaf64f8a7244d534bbc2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecce96a5f2f3016cf240f208256b7faec73e0496b5bcaf64f8a7244d534bbc2b
Size

5.2MB
MD5

19031626ab9cf9487465cd9bf6098434
SHA1

4f87102e7a0d6e3096654f05f62e34cd84cdd159
SHA256

ecce96a5f2f3016cf240f208256b7faec73e0496b5bcaf64f8a7244d534bbc2b
SHA512

2923734d3b655761cb02c7014d3c33d4a8a7cc4424c249ca18b8b085204fceeace6ef315939e3c0c5a55fcd96747cdf0279cf3cabcd2b377e159ee56b2d2f4e7
SSDEEP

49152:8Y7s69eWUIpmQ2/tcJS1AcATwykbKUZS06f7JRyuGPFhkWWZ5f0fTb7fiVVWNZSD:eweWqpATEZSWFhkXeTfiVoaRR

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecce96a5f2f3016cf240f208256b7faec73e0496b5bcaf64f8a7244d534bbc2b

Files

ecce96a5f2f3016cf240f208256b7faec73e0496b5bcaf64f8a7244d534bbc2b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 531KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.5MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE