c717a4d083d6346f0669f63c2ce1019bd30f17c6e6f547110bcb8439fca16e99 | Triage

Sharing

General

Target

c717a4d083d6346f0669f63c2ce1019bd30f17c6e6f547110bcb8439fca16e99
Size

3.6MB
MD5

ba7e4720bc0a3f68a99403aa3a5e6767
SHA1

ce273998f8264621ebe05994938e06f1826c5e7f
SHA256

c717a4d083d6346f0669f63c2ce1019bd30f17c6e6f547110bcb8439fca16e99
SHA512

1b8b5ab5e986d6ee3ef16a06a0b62986dfda3c8a2856c699fc8017b56cd84db5480d7bf5e98a7cbb663ce8cb8f170a1d1312c8c82c9e19433dc3ff75e756e2ea
SSDEEP

98304:Ipo8B/WB4mv4DiUFKDGn1NvIAhq852jJeksKN0L/2tzv:ufI46JUF9n1NAA9MjJeksk0Cv

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c717a4d083d6346f0669f63c2ce1019bd30f17c6e6f547110bcb8439fca16e99

Files

c717a4d083d6346f0669f63c2ce1019bd30f17c6e6f547110bcb8439fca16e99
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE