6f1a1c25b6a493fa5bf99d477c9412128ae479fdcb778a9a2831d67f95af9900 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f1a1c25b6a493fa5bf99d477c9412128ae479fdcb778a9a2831d67f95af9900
Size

502KB
MD5

b13e93e02e8978b29e442dd6782167c9
SHA1

84cceb485fd71831966aed37021b4e17d20faa35
SHA256

6f1a1c25b6a493fa5bf99d477c9412128ae479fdcb778a9a2831d67f95af9900
SHA512

e4a24a4abc18e7c2b36d108aaef90ceb2cd4419b4d08b7ad2ee295781e7d0679aea41a48cf627a29faec7b54361282aa61c87ea3ac4f36d1a6d00688bd04f65e
SSDEEP

12288:bxdsyfNdhVLlHJdlQe4NA4mZkzTHcFCY0pZ/CtvQK4n:LNffhVZHjlN4NAFmD2zo/C1M

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1a1c25b6a493fa5bf99d477c9412128ae479fdcb778a9a2831d67f95af9900

Files

6f1a1c25b6a493fa5bf99d477c9412128ae479fdcb778a9a2831d67f95af9900
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 347KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE