edc1bea6e74251274f48c778ef96dbc151039f26f1f05677bdca32befddcbdd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edc1bea6e74251274f48c778ef96dbc151039f26f1f05677bdca32befddcbdd8
Size

1.7MB
MD5

3ae833248ed386adf0c8e7b3e5546728
SHA1

5e51657e9e3f069dd03fc7e98fed9f72598435ae
SHA256

edc1bea6e74251274f48c778ef96dbc151039f26f1f05677bdca32befddcbdd8
SHA512

a5e8fe5c52f51bef85cd3df8a98fb76c52876cdef2b76f9a8f82366e45736ef84a199788ac9946621cf4e6118bbc0a3c5b2a22053192ffe6cc12069b58626665
SSDEEP

24576:T0w3xGvW5+s0Ewewe6zAF5pb6jQlw7AUrV1VVUJTSAj46pGNuKTwav5By:T7svNELwJctsTVEp46MNdwav5B

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc1bea6e74251274f48c778ef96dbc151039f26f1f05677bdca32befddcbdd8

Files

edc1bea6e74251274f48c778ef96dbc151039f26f1f05677bdca32befddcbdd8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 315KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack
.data
.rdata
.rsrc/DIALOG/102
.text