a6ec1e2d066c8589ac866ab93eb305737df00bca138b1b32628ee6e6fded0f7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6ec1e2d066c8589ac866ab93eb305737df00bca138b1b32628ee6e6fded0f7b
Size

261KB
MD5

afaf1dad141dcb0548b36d4d299231bd
SHA1

30eb0a18113948dbc57efbcd25b9a323e99f7178
SHA256

a6ec1e2d066c8589ac866ab93eb305737df00bca138b1b32628ee6e6fded0f7b
SHA512

ebaf09191c66260dcc20c8d8a44a06c8dd36212087daea5a0ecffe12628f1e888371925a9cb9d5ca0b1aa1121501473d49a1c4b95ff1e927c5cc5677e552f85f
SSDEEP

6144:gijDv0kWfhJR6aMTq+m/Py9XJhmdsPb5LNC:g6DVKhTic/a3hAslg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6ec1e2d066c8589ac866ab93eb305737df00bca138b1b32628ee6e6fded0f7b

Files

a6ec1e2d066c8589ac866ab93eb305737df00bca138b1b32628ee6e6fded0f7b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE