d5c8d8b1a179b0bef7ea9ba44a690d5c94fbef5c21c2010c908bb14ac5d2a9b2 | Triage

Sharing

General

Target

d5c8d8b1a179b0bef7ea9ba44a690d5c94fbef5c21c2010c908bb14ac5d2a9b2
Size

451KB
MD5

241cf6b4cf4a06a99a8907287dea57a1
SHA1

1b13d60b34cf3c04738130c472516b122ab50671
SHA256

d5c8d8b1a179b0bef7ea9ba44a690d5c94fbef5c21c2010c908bb14ac5d2a9b2
SHA512

74f05ccf90307eb0d301a35558639224215f6c067093292bcd94797a31fb56a3825ab6c95c0f40498bdf9a5cb352280c541a783b5b286adbd3183df41b05d0ad
SSDEEP

12288:15oPv3nvjOPzNLaS5wqCCoBH+pa1xBZ4rJtyRwmn/aCy4z:1aX3vjOrNLaSSUY1FYtyROaz

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
aspackv2

Processes:

resource yara_rule

sample aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
d5c8d8b1a179b0bef7ea9ba44a690d5c94fbef5c21c2010c908bb14ac5d2a9b2

Files

d5c8d8b1a179b0bef7ea9ba44a690d5c94fbef5c21c2010c908bb14ac5d2a9b2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 333KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE