3de5f4bb848b8634f5930788cd2d21b2523b58093ba72be5acec87bdb9537558N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de5f4bb848b8634f5930788cd2d21b2523b58093ba72be5acec87bdb9537558N
Size

381KB
MD5

3d62a77ad4d6ac8375f88c598259ea00
SHA1

60f48c8dc4e4c40c0562b936b383b720b14f9853
SHA256

3de5f4bb848b8634f5930788cd2d21b2523b58093ba72be5acec87bdb9537558
SHA512

4b92d3bd887a0dc713f134bad91026c64aa3ad017aeb6f375e4807c6cc4e3dfd13914fbdf955f710796a74ad268b7feb6c1712466e69be87b0c4e5deb6349044
SSDEEP

6144:UdlnS7sKdB/dXXX1XXXJXXXFXXXhXXX4XXX6XXXlXXXpXXXHXXXtXXXLXXX0XXXJ:Ud1msYB/dXXX1XXXJXXXFXXXhXXX4XXV

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de5f4bb848b8634f5930788cd2d21b2523b58093ba72be5acec87bdb9537558N

Files

3de5f4bb848b8634f5930788cd2d21b2523b58093ba72be5acec87bdb9537558N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE