11dd297268156e81b18cc45cb916be80N[.]exe | Triage

Sharing

General

Target

11dd297268156e81b18cc45cb916be80N.exe
Size

184KB
MD5

11dd297268156e81b18cc45cb916be80
SHA1

19603a7e099a499fda0994debf4af585bc9214fb
SHA256

ecb3a8bd046847817b1e0d23b28c589873cebc908cde5ec283879654642359a9
SHA512

79a61bc92f575e283b828c79772a992b97f6b2921d7bd3f982e05c60b86ad2aef206216da4773c5600c5f7ac3cbeab536c5069dde41d1c391ff9e87cbea20c3d
SSDEEP

1536:KtePmSadThTd/M3Jx5a1EiJYtHrlS2AWmIgeJk+Fdc6DBiNY95sNMtDHt:KYuBThTd/MZ/rHrlSnqnFdc2Ht

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11dd297268156e81b18cc45cb916be80N.exe

Files

11dd297268156e81b18cc45cb916be80N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XOR
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE