f805ec94b57de193e4ab15e3cd9227febff80a5869cb9d55845447f9fee1a2f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f805ec94b57de193e4ab15e3cd9227febff80a5869cb9d55845447f9fee1a2f2
Size

42KB
MD5

69f4ae8da2c6ae5b41d0262a061eac5a
SHA1

1c9b11bc7c7e4a3611e247e1bc135f3a0ac855de
SHA256

f805ec94b57de193e4ab15e3cd9227febff80a5869cb9d55845447f9fee1a2f2
SHA512

64a5a4e0d1bf6587c14161847a784e2bae247d34e77d3fcac7f0b1c80005a6947c52e2161f616772931c75c37b6f304b7632be08dc93c3deef0662ddaaafd7ff
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888T:BzOCay4wV339rPjzbpLwRJ9pSdoIy

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f805ec94b57de193e4ab15e3cd9227febff80a5869cb9d55845447f9fee1a2f2

Files

f805ec94b57de193e4ab15e3cd9227febff80a5869cb9d55845447f9fee1a2f2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE