acb311ea9ee1068d37e11d526dcfaa4c7cb044bc5a64a14eea68f3622455e40c | Triage

Sharing

General

Target

acb311ea9ee1068d37e11d526dcfaa4c7cb044bc5a64a14eea68f3622455e40c
Size

3.6MB
MD5

1c81761aa6d6b3713624fd9db865a142
SHA1

e69d4036421fcad4941b676ca91513c0bab22957
SHA256

acb311ea9ee1068d37e11d526dcfaa4c7cb044bc5a64a14eea68f3622455e40c
SHA512

ac1a74040528217fbedbd4db95771464610f72036f1ebd0dd82ff038c8bf05f076171777119e4f17a4e0ff5a98016d56c82a27aa3ec5f7ee9e3d3fa8bacd67ac
SSDEEP

98304:85o8B/WB4mv4DiUFKDGn1NvIAhq852jJeksKN0L/2tzvO:KfI46JUF9n1NAA9MjJeksk0CvO

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
acb311ea9ee1068d37e11d526dcfaa4c7cb044bc5a64a14eea68f3622455e40c

Files

acb311ea9ee1068d37e11d526dcfaa4c7cb044bc5a64a14eea68f3622455e40c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE