8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a

Sharing

Copy URL Twitter E-mail

General

Target
8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a
Size 1024KB
Sample260804-d9mlfacd99
SHA256 8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a
MD5 9f675504ca7b1adb77a9d5fd438c1ce3
SHA1 b08f2b3126ab33101b232f83ba40c801431e9385
SHA512 0f347b489bef87a1039954711c60a685b92636271165325e9c9050bdc3b6a234f4fec17f5480b5da892c404d020859637423b685ea228fba69bbf036bddfcae2
SSDEEP 24576:+QC/fhNxnzrGlXFOc3/HqhAxRgZeKieHqJVKlSu1UYaZu1CIKTzXW4coWlPSM00k:+D/fhNteOc3/KhAxRgZeBeHqJRu1UYap
TLSH
T1F2255B54FE47A0F6ED4B1AB16547F33F4735D202C824CEDBDE881945ED33962A20DA2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a

File Explorer

8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a

.dll 1024KB

8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a

SHA256 8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a
MD5 9f675504ca7b1adb77a9d5fd438c1ce3
SHA1 b08f2b3126ab33101b232f83ba40c801431e9385
SHA512 0f347b489bef87a1039954711c60a685b92636271165325e9c9050bdc3b6a234f4fec17f5480b5da892c404d020859637423b685ea228fba69bbf036bddfcae2
SSDEEP 24576:+QC/fhNxnzrGlXFOc3/HqhAxRgZeKieHqJVKlSu1UYaZu1CIKTzXW4coWlPSM00k:+D/fhNteOc3/KhAxRgZeBeHqJRu1UYap
TLSH
T1F2255B54FE47A0F6ED4B1AB16547F33F4735D202C824CEDBDE881945ED33962A20DA2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69633

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8a46e1bba342d2688e1f62eaeadf969ce1e22fb422d8a2a75b2fcf6c8ec1790a

generic