daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3

General

Target
daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3
Size 3.6MB
Sample260709-hay8eaew2v
SHA256 daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3
MD5 9d972fe2797c676dbe1c9a4785bc0e8f
SHA1 294adfa1129e60e38aba134c05e22c97b6780e76
SHA512 cebe410d1ccefa80740162f59d5ee7812556fae03de4b6c463636733e429fc7daf0d1a1073c7a4ae895c13b2ee627c3a3df011d61dd1cf360a7e0a4e96332177
SSDEEP 98304:TDcyzctXwDTLVu2FzEcaWzNlHgqvVDwIC:T4nyTXzXAqn
TLSH
T1D70633AE1C3A08FBDF7A45B81F1B05C9A895C86863E38E35E5C5C4EAD47006737386D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3

File Explorer

daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3

.exe 3.6MB

daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3

SHA256 daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3
MD5 9d972fe2797c676dbe1c9a4785bc0e8f
SHA1 294adfa1129e60e38aba134c05e22c97b6780e76
SHA512 cebe410d1ccefa80740162f59d5ee7812556fae03de4b6c463636733e429fc7daf0d1a1073c7a4ae895c13b2ee627c3a3df011d61dd1cf360a7e0a4e96332177
SSDEEP 98304:TDcyzctXwDTLVu2FzEcaWzNlHgqvVDwIC:T4nyTXzXAqn
TLSH
T1D70633AE1C3A08FBDF7A45B81F1B05C9A895C86863E38E35E5C5C4EAD47006737386D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3936257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.6MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

15KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

daf68abcfb6797fa983eb767daba35d1033b9e07707bbd1455c73cc3373b8ed3

generic