2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d

Sharing

Copy URL Twitter E-mail

General

Target
2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d
Size 14.2MB
Sample260802-vj61tsda53
SHA256 2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d
MD5 dc64c90950b61dc18ff1a1af761c8209
SHA1 36e6faf2af6cddae11c4afa71ba58b6a1f141169
SHA512 7689d1f1f40023c7e8e56217f1da760e43b465aae18a0610cc00940ff1ffe1ba273be13d5058988e1bf4bca4a902dbdb301895cdcf399419c4369f3c68cab4eb
SSDEEP 393216:27+aJx31M0+V++s0jWdfGbjlzQmVyLv77qe:c+YAnqGb5zJQLvl
TLSH
T14AE6330CE1141807CD4E47B95ACBE4B1B088FDBAB5B56965B08739E73AB79500B70B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d

File Explorer

2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d

.exe 14.2MB

2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d

SHA256 2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d
MD5 dc64c90950b61dc18ff1a1af761c8209
SHA1 36e6faf2af6cddae11c4afa71ba58b6a1f141169
SHA512 7689d1f1f40023c7e8e56217f1da760e43b465aae18a0610cc00940ff1ffe1ba273be13d5058988e1bf4bca4a902dbdb301895cdcf399419c4369f3c68cab4eb
SSDEEP 393216:27+aJx31M0+V++s0jWdfGbjlzQmVyLv77qe:c+YAnqGb5zJQLvl
TLSH
T14AE6330CE1141807CD4E47B95ACBE4B1B088FDBAB5B56965B08739E73AB79500B70B2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15970305

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.data

Size

13.4MB

Virtual Size

14.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sb

Size

596KB

Virtual Size

736KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

204KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sb

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sb

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2da23fd40ec86df39750cac3e50b197c138648898a73d461cf8eeb28f9b59b4d

generic