471dd3db4bc0d7f42456d7392ad5d78f61656fadb0e2f29b32527afc93d572ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

471dd3db4bc0d7f42456d7392ad5d78f61656fadb0e2f29b32527afc93d572ee
Size

15.1MB
MD5

ce7cf2b73d6d89fa2e2a69c708ed1f93
SHA1

b76d3294165c39194db408a22430c01daeabcad8
SHA256

471dd3db4bc0d7f42456d7392ad5d78f61656fadb0e2f29b32527afc93d572ee
SHA512

33f139355f12b8e482c7631ca68321c7522943511d42ba6b8ceff4914b3c898e4e6fc218de9a6436710f331217c165cdc64a8fff4a0c08b782167e5202c44049
SSDEEP

393216:U+X0IqAfIlWJKEcUVhrbxZWn29NPn81VxHcDZEqjO:pnqAg0RcM/Z59NPOcWqjO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
471dd3db4bc0d7f42456d7392ad5d78f61656fadb0e2f29b32527afc93d572ee

Files

471dd3db4bc0d7f42456d7392ad5d78f61656fadb0e2f29b32527afc93d572ee
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 394KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.2MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE