4db7ef3b952a6b9c4daf7ed56163a30f2a3951f423d293034f72ebc793182cba | Triage

Sharing

General

Target

4db7ef3b952a6b9c4daf7ed56163a30f2a3951f423d293034f72ebc793182cba
Size

3.6MB
MD5

063a40f58c8853d85b4d15e288dd25a1
SHA1

a25e3a53671199afdd20d55523576cdde36345a1
SHA256

4db7ef3b952a6b9c4daf7ed56163a30f2a3951f423d293034f72ebc793182cba
SHA512

db256fc65258a695a7493cae1b4b9564de49863792846bd481525fa632355afb5cd9ddaf2671a8c5575d9d86a9fb2163b30d35679f0c4bba6ee5c764d61e0799
SSDEEP

98304:OGqDm8/rypVIGPhJEuL2oNOF3076h4nNKvV1+h32fHHF4VA9:OG2m0y3IGEu743iLKvVBHF4A

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4db7ef3b952a6b9c4daf7ed56163a30f2a3951f423d293034f72ebc793182cba

Files

4db7ef3b952a6b9c4daf7ed56163a30f2a3951f423d293034f72ebc793182cba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE