d54c5d4ed0c4e7213cc4b4c1fb376507d704f348cf51e2ac1b17156fe8c47d94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d54c5d4ed0c4e7213cc4b4c1fb376507d704f348cf51e2ac1b17156fe8c47d94
Size

86KB
MD5

7aebd2fffc90e6924dbe18d0b72d1f20
SHA1

92900e4d9645a3e4681e7bd17ce94426686cf2c5
SHA256

d54c5d4ed0c4e7213cc4b4c1fb376507d704f348cf51e2ac1b17156fe8c47d94
SHA512

c1df9a22fba916cc017570cb86c1f9b8d0b7aa7f064a3e8794491ed9dfd7609b3cf8b163c3176007ef53cbf96c26eb571bd41146d59534904d9c339203a78470
SSDEEP

768:5E/OA8FyKRuwjRGhedlrp0nnzlvaJXbgmj5MjSLCP0+pZkAyx6deV9D:AOSEjRFllz2mmj0CcI+q0D

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d54c5d4ed0c4e7213cc4b4c1fb376507d704f348cf51e2ac1b17156fe8c47d94
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE