b8088aacb688ed299e1bbcf5dcae86ee70442541bdcc201e6565e9641672a202 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8088aacb688ed299e1bbcf5dcae86ee70442541bdcc201e6565e9641672a202
Size

11.4MB
MD5

05193613df787db76248340ccbfa0994
SHA1

62cdd4d1230cc7a29af9868780528547573230d5
SHA256

b8088aacb688ed299e1bbcf5dcae86ee70442541bdcc201e6565e9641672a202
SHA512

54063d0db3f9775d0679ab1a0bae90cf5aa3ee1eea803938b85387b55fe473499b8cbbdb3a24746814563090d6cc2ff4cd1fb83b8925c0088a83dd971abcf5b1
SSDEEP

196608:d3J1ngG34t+iL37MRwMVV75kYO6gAvXvvpxCoMJbMWZTC4cwmpUmpqonFHqTr:dZ1nFiLLMR5VV72x6XxxCo0AWxZcrdpi

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8088aacb688ed299e1bbcf5dcae86ee70442541bdcc201e6565e9641672a202

Files

b8088aacb688ed299e1bbcf5dcae86ee70442541bdcc201e6565e9641672a202
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 394KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE