8fa21abd61f18faa2fc523afa879cc73cc333473404e6fa8eff218655793e874 | Triage

Sharing

General

Target

8fa21abd61f18faa2fc523afa879cc73cc333473404e6fa8eff218655793e874
Size

3.6MB
MD5

2e961d97ab7f0c5d0b8cebe2c545c22d
SHA1

82df34a58876142eb4b1597694b7c99be437eeb4
SHA256

8fa21abd61f18faa2fc523afa879cc73cc333473404e6fa8eff218655793e874
SHA512

4a204b08b26a378ba16cbbb94694a0ccabaeddbcd00a585c058c57e770ee98bdd731136cc1646bd0716b606a26187d1312cb87e66fd8b24c0541d2b8719aa5d7
SSDEEP

98304:JGqDm8/rypVIGPhJEuL2oNOF3076h4nNKvV1+h32fHHF4VA9:JG2m0y3IGEu743iLKvVBHF4A

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa21abd61f18faa2fc523afa879cc73cc333473404e6fa8eff218655793e874

Files

8fa21abd61f18faa2fc523afa879cc73cc333473404e6fa8eff218655793e874
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE