1c516b54a54966a8bc3395bd899baa3d0ae975b1d399b93a524db4623d371987 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c516b54a54966a8bc3395bd899baa3d0ae975b1d399b93a524db4623d371987
Size

6.9MB
MD5

49977170b6bc3744e0111eda3a3a7497
SHA1

dac5ae170a36b9666b2c1ef44ab7630a482169f6
SHA256

1c516b54a54966a8bc3395bd899baa3d0ae975b1d399b93a524db4623d371987
SHA512

aa05344a90d35c30642b333bc965b71ce2b5f184c1c834924dddf60e24a35f522442f0490a2e75dc2d1c7cac6019551ae7a583b2b75f04a94c82737421a5c7f1
SSDEEP

196608:RWHuLqThDUsttzvV3MkWef0ft+IMzIxfm:RRE2sbvV3MkW5+hIp

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c516b54a54966a8bc3395bd899baa3d0ae975b1d399b93a524db4623d371987

Files

1c516b54a54966a8bc3395bd899baa3d0ae975b1d399b93a524db4623d371987
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6.8MB - Virtual size: 27.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE