89a567fd4d51391fc06cf221d585c2df80e5dd89aa4df40cc99ff009a384d300 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a567fd4d51391fc06cf221d585c2df80e5dd89aa4df40cc99ff009a384d300
Size

8.3MB
MD5

cf2cbc1399508a0d671fb0028a235bf1
SHA1

be11f99ea226cf3397db67a3bcb1a5550c45d02e
SHA256

89a567fd4d51391fc06cf221d585c2df80e5dd89aa4df40cc99ff009a384d300
SHA512

5e2bf990cdb78691ea58abccb6ef32c945634410325583ddd1781899352c1a168697fb43dab68e69c68b9f9f365126ccc5885adcd2929c25ed925ddd228e957d
SSDEEP

196608:W4EwubRumSI4Mzv1LQx5bxT2nOcTr6gAvXvvpxCoMJbMWZTC4aVykG3p3:WZrSI4MZ21xBOr6XxxCo0AWxZaVOF

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a567fd4d51391fc06cf221d585c2df80e5dd89aa4df40cc99ff009a384d300

Files

89a567fd4d51391fc06cf221d585c2df80e5dd89aa4df40cc99ff009a384d300
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 394KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.7MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE