a004e2622f3530f28c98e0a87db94fc2422f21343ca8919dec09fc2e4e3fb0d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a004e2622f3530f28c98e0a87db94fc2422f21343ca8919dec09fc2e4e3fb0d7
Size

9.8MB
MD5

70d4a7ce542eeb9d25d5b965629f57d8
SHA1

b15486ee3e6c5969072d7f77f4767a4a463f40b9
SHA256

a004e2622f3530f28c98e0a87db94fc2422f21343ca8919dec09fc2e4e3fb0d7
SHA512

ce3aec4b8952fe05d5333d564997865c6e8329e3b07aa78380da3fc3dd39c967e73559bf9e15861a04b7e032bcf5fa4e65acf1c4dd3cb10c7cdbc324f34cb910
SSDEEP

196608:F7ujNIaVlUn433BRcNs0ushOML3Ezm0E+UrI1mLCzBLvK+tLw+rVdtPNA8XMH:FKjtXUSPcWMhOq0zchM1aCzBLvKQE+JY

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a004e2622f3530f28c98e0a87db94fc2422f21343ca8919dec09fc2e4e3fb0d7

Files

a004e2622f3530f28c98e0a87db94fc2422f21343ca8919dec09fc2e4e3fb0d7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 394KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.6MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE