499bb0c7ef4d17e7e130ee1d9c771d426749004cbf1412c08df434ee98240fd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

499bb0c7ef4d17e7e130ee1d9c771d426749004cbf1412c08df434ee98240fd5
Size

1.8MB
MD5

7fc008a8509e835c9df4a33368fdabf6
SHA1

15640540ac58b681be0c362af50312a594c76181
SHA256

499bb0c7ef4d17e7e130ee1d9c771d426749004cbf1412c08df434ee98240fd5
SHA512

2dd079b4a6c3fe8abf903c11a36877abd592ba9fe9cf610cc0ddadb44dbb07ff6856cb57dcb4ee70624cb567a7887594ed35d1efed3112c4e1fcf2bb66eaa2c7
SSDEEP

49152:WlkSB2mDe52YyCtZvSFL2+YCCsDpFqvzF2rudIzC:W+10YywcFL9NCEpI0adIz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
499bb0c7ef4d17e7e130ee1d9c771d426749004cbf1412c08df434ee98240fd5

Files

499bb0c7ef4d17e7e130ee1d9c771d426749004cbf1412c08df434ee98240fd5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 747KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE