d5484df294e748be6c204b835d5dc63d518038e10af8264f206b5b2b0ed57558 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5484df294e748be6c204b835d5dc63d518038e10af8264f206b5b2b0ed57558
Size

119KB
MD5

0ab5259da01863cd9677a92ddae8d76e
SHA1

83db71ce1e3dd4ef47f90576593a6eed2122c0ed
SHA256

d5484df294e748be6c204b835d5dc63d518038e10af8264f206b5b2b0ed57558
SHA512

888e19df64d43a62712e3c4c25d188a62b8cab35aa673fca7f6edee783e436bc90569a2d3affa7115b225ef5ad06e8d8924cfa5ad91513f3569d134471b1ebeb
SSDEEP

1536:+tn1df4/Zzx8aopLVzprcGAOn5jWUuEm0reydHNkAlju/u44c/Rmlx27AV7vWEO2:Ev4Eao5VZbA2KydtkAlF4hZ42/V20v2

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5484df294e748be6c204b835d5dc63d518038e10af8264f206b5b2b0ed57558

Files

d5484df294e748be6c204b835d5dc63d518038e10af8264f206b5b2b0ed57558
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 87KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE