19d020e2585e5b9390156a6fa3aba08b6988b02c4bbd6305a36dd237be613239 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d020e2585e5b9390156a6fa3aba08b6988b02c4bbd6305a36dd237be613239
Size

13.9MB
MD5

a8f978557100571ec1dc53e971cbf926
SHA1

57f62c858c0fb4c03608fe79c8b44ddee0bceb56
SHA256

19d020e2585e5b9390156a6fa3aba08b6988b02c4bbd6305a36dd237be613239
SHA512

e69a2f0567b47dbc476bcd6a868af9bc0b2952ed8c952427d5b3d5769c3bf8f6aa88e029ffa95180174ba2cca55295cbf2595fb5960ea67196e92bd73a01ada9
SSDEEP

393216:qzOoDqDEYf1GXYdnr99vIjfnveaHX/Zw8x3qO:/oWDdFhLvynWaHPGe

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d020e2585e5b9390156a6fa3aba08b6988b02c4bbd6305a36dd237be613239

Files

19d020e2585e5b9390156a6fa3aba08b6988b02c4bbd6305a36dd237be613239
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12.1MB - Virtual size: 22.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 215KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE