234604f9641ca36ea009fe19e9e26eec97c88b81775a1cdea8a65cc2450aa268 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

234604f9641ca36ea009fe19e9e26eec97c88b81775a1cdea8a65cc2450aa268
Size

3.6MB
MD5

c2c94411b885113cd5dddb96fa6e9f0d
SHA1

5435f76f3b3fae0c4fd45724f09416f02fe4c470
SHA256

234604f9641ca36ea009fe19e9e26eec97c88b81775a1cdea8a65cc2450aa268
SHA512

5e75877f3f46831da8ddb2f1efd7468f8bc27dc50cca914ac291b7d0e3061bc0087469fbacfb6bd722a823667c7b330321c023522f52801a07414a3a849c5daa
SSDEEP

98304:qGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:aekwdeyLXdIyzdM

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
234604f9641ca36ea009fe19e9e26eec97c88b81775a1cdea8a65cc2450aa268

Files

234604f9641ca36ea009fe19e9e26eec97c88b81775a1cdea8a65cc2450aa268
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE