738ff1b734f45db5f96fcf7cf44bc19be88ae922ef08a4b1952bdc3b12e86090 | Triage

Sharing

General

Target

738ff1b734f45db5f96fcf7cf44bc19be88ae922ef08a4b1952bdc3b12e86090
Size

3.2MB
MD5

3fb2f5066869406a50e80c42dd60a4d4
SHA1

6f37376ab53343560135d36fc14714a2925d219e
SHA256

738ff1b734f45db5f96fcf7cf44bc19be88ae922ef08a4b1952bdc3b12e86090
SHA512

588bd0b9ef4dfd72716c98ce4d04f892afbadfa8ae084be67469d57c8f444ab9ffa3d2952d7635d5fded04aae919de5dd4ebf2f7df7398b06da0aaf331cff3f6
SSDEEP

98304:KsVrgQz5P7C6lSQt98LQ+r4s1fN7tN3daLXc:zVESPW6lL988+EaNhLajc

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

738ff1b734f45db5f96fcf7cf44bc19be88ae922ef08a4b1952bdc3b12e86090
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 506KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE