Avoid[.]zip | Triage™

Resubmissions

08/11/2026, 00:29

261108-as3pjss15j7

07/11/2026, 23:18

261107-298exawset7

Sharing

Copy URL Twitter E-mail

General

Target
Avoid.zip
Size 241KB
Sample261107-298exawset
SHA256 8a9d0115b56f9a6a8ed231d3400e1362425e265e5944a0ec0903a70e888ab171
MD5 19851e369fc50763189442e3c6694712
SHA1 d2e47f277743f3c4253bc2ce85bb40cc67c87b8f
SHA512 f79ba6f1219f8e10cadc3a4a5c8ab2051affe3b9bf7a4edaed505dd3acddcd57327f6cb1f728e37a74a78d685a9bd244313a629cdffea58a219a7eb4615f31de
SSDEEP 6144:GGI0XrI4z5qS/4YiSA79KR4zc8r8FL7KFKz6wlXhH:pvX0ABd09KqzcZL+FKzHxH
TLSH
T19C34237DB289B7C7B8D02FAEC052720DC347516AE395E3A2A6580CE7F727474B49291C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/[email protected]	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[email protected]

File Explorer

Avoid.zip

.zip 241KB
[email protected]

.exe 248KB

Avoid.zip

SHA256 8a9d0115b56f9a6a8ed231d3400e1362425e265e5944a0ec0903a70e888ab171
MD5 19851e369fc50763189442e3c6694712
SHA1 d2e47f277743f3c4253bc2ce85bb40cc67c87b8f
SHA512 f79ba6f1219f8e10cadc3a4a5c8ab2051affe3b9bf7a4edaed505dd3acddcd57327f6cb1f728e37a74a78d685a9bd244313a629cdffea58a219a7eb4615f31de
SSDEEP 6144:GGI0XrI4z5qS/4YiSA79KR4zc8r8FL7KFKz6wlXhH:pvX0ABd09KqzcZL+FKzHxH
TLSH
T19C34237DB289B7C7B8D02FAEC052720DC347516AE395E3A2A6580CE7F727474B49291C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

mysubsarethebest

[email protected]

SHA256 3ac8cc58dcbceaec3dab046aea050357e0e2248d30b0804c738c9a5b037c220d
MD5 20d2c71d6d9daf4499ffc4a5d164f1c3
SHA1 38e5dcd93f25386d05a34a5b26d3fba1bf02f7c8
SHA512 8ffd56fb3538eb60da2dde9e3d6eee0dac8419c61532e9127f47c4351b6e53e01143af92b2e26b521e23cdbbf15d7a358d3757431e572e37a1eede57c7d39704
SSDEEP 6144:0rSA7Pb4pz1EZiID9FqpRsAez4akK00Yl2JkZohSi87DK:/2D9YRsrp1a2JAiCK
TLSH
T18A4413264398CFFFF0C5A83672D76BA4FB7ED414922282096314687D3746B3EAA4D174
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Password

mysubsarethebest

Minor OS version

Major OS version

Entry point

667649

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

177KB

Virtual Size

408KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Avoid.zip

[email protected]

generic