ee4aa7fac650f52aaec391376c83ae71e53a3dd13161f51309b5610f4cb330c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee4aa7fac650f52aaec391376c83ae71e53a3dd13161f51309b5610f4cb330c2
Size

3.6MB
MD5

b9f4a56fa7e783e9396f8882bbd54952
SHA1

180c647d14ffa01bdd19d3e932668e27b0767951
SHA256

ee4aa7fac650f52aaec391376c83ae71e53a3dd13161f51309b5610f4cb330c2
SHA512

8c79d8f51ae870947f557507744657fbf18268b114d40e34be98d765de1df979e0bc4ff8558999a2e81f84ebc7010736957842c41c2bf93d4f36b5102842fbd6
SSDEEP

98304:Mho8B/WB4mv4DiUFKDGn1NvIAhq852jJeksKN0L/2tzv:ifI46JUF9n1NAA9MjJeksk0Cv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee4aa7fac650f52aaec391376c83ae71e53a3dd13161f51309b5610f4cb330c2

Files

ee4aa7fac650f52aaec391376c83ae71e53a3dd13161f51309b5610f4cb330c2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE