1f331a69bab8d3928015853b32ee5544007ead4ae13e1be99cd20255bb71fbb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f331a69bab8d3928015853b32ee5544007ead4ae13e1be99cd20255bb71fbb9
Size

1.5MB
MD5

361ec75a10d8eef0bf1da3706c4e1b85
SHA1

ce1058f724fad2e7aea03096ad10d6a0b4531cd8
SHA256

1f331a69bab8d3928015853b32ee5544007ead4ae13e1be99cd20255bb71fbb9
SHA512

bc732885b43ce3adadb8e4e7a3701043a0fcfbac587acec3a151129053073bf3a7fed02b652419bb40afaff58e614e7c807875340ff7084f1c0d74828ad77273
SSDEEP

24576:aLO/gG+5/VHz+oNaw56UIQml/zR06QL0UpIwDGBgSz8YXk/h+Axb9XCdMVvu/BYT:Oyk/xu4622S6QLXpji9zfUJnt4oP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f331a69bab8d3928015853b32ee5544007ead4ae13e1be99cd20255bb71fbb9

Files

1f331a69bab8d3928015853b32ee5544007ead4ae13e1be99cd20255bb71fbb9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 315KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack
.data
.rdata
.rsrc/DIALOG/102
.text