6a80804e172217bf907e16e5d4bb7f4ae135d768a231d7e782dc03bb4f25d844 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a80804e172217bf907e16e5d4bb7f4ae135d768a231d7e782dc03bb4f25d844
Size

527KB
MD5

87c538cfc2be90569e2f50432b5064a1
SHA1

fbef8ee7bc1cbf16e41f12a71bbe020b49f567a5
SHA256

6a80804e172217bf907e16e5d4bb7f4ae135d768a231d7e782dc03bb4f25d844
SHA512

fcab200a75b6c9d9cbe1a40c45cbee18d8e035544a5d9e0bc1cf71ecffce7e7170162c12cb0c043c0896867560f7fdeda5a430fdf5717406ee746d516561e487
SSDEEP

12288:T2Whf+A2K8Wy1Kcci6Zy8puvuqCxRt1G7X3Yx:TB2AjAzcj38WV1G7Xox

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6a80804e172217bf907e16e5d4bb7f4ae135d768a231d7e782dc03bb4f25d844
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 317KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE