97abccd3708dffff59e7a94e5f01fe145d6c065fbd2495c0f17d65abc3618fc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97abccd3708dffff59e7a94e5f01fe145d6c065fbd2495c0f17d65abc3618fc8
Size

451KB
MD5

01aa41ec7782c3a1039e7501b194d7e1
SHA1

34ae584159f968f10e83b5ef350c0bbce8f280a9
SHA256

97abccd3708dffff59e7a94e5f01fe145d6c065fbd2495c0f17d65abc3618fc8
SHA512

edcf323f86a192a81593deefadd8d213fce3e8ae087a219b3cf732e15900e5c543da7f6a81527c76b7967eeeee4ba24379a81b8c3f106ef4e5ed586fdc7931ba
SSDEEP

12288:F5oPv3nvjOPzNLaS5wqCCoBH+pa1xBZ4rJtyRwmn/aCy4z:FaX3vjOrNLaSSUY1FYtyROaz

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

97abccd3708dffff59e7a94e5f01fe145d6c065fbd2495c0f17d65abc3618fc8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 333KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE