ee5820b82eb5bbce61bafd09b148bb220d19d030c2585cb8635af42b87439cd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee5820b82eb5bbce61bafd09b148bb220d19d030c2585cb8635af42b87439cd8
Size

3.7MB
MD5

dcaf12503aea72947c506736f6892e61
SHA1

98a8c673ad7dbff3388743be6963a6170a06c10c
SHA256

ee5820b82eb5bbce61bafd09b148bb220d19d030c2585cb8635af42b87439cd8
SHA512

435c8d1119d9eea297160420fe2bd01a9d665d765ab534bb14ff764e9e4fbd5fe0cd7d6dd3c857d681e73eae7cede9eb09b8784035d73db43b1a97a38a4334c8
SSDEEP

98304:p22hau0qlIZBVVWpUpuaUR8OaYoJ3Vs+JH:zvCjv28W8OCssH

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ee5820b82eb5bbce61bafd09b148bb220d19d030c2585cb8635af42b87439cd8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 498KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 186KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 104KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE