db868753ae5c1a3a6d6beed164150c09224cb5ec5163643a1bd3fb7b359abf3f | Triage

Sharing

General

Target

db868753ae5c1a3a6d6beed164150c09224cb5ec5163643a1bd3fb7b359abf3f
Size

464KB
MD5

42e0a4dd6db8a25c63e3c5da3b6720bc
SHA1

55d31ca72b37c5db07c2f61ff9b3132a2b3731bc
SHA256

db868753ae5c1a3a6d6beed164150c09224cb5ec5163643a1bd3fb7b359abf3f
SHA512

4b8c58f12a231690058e77344a8427b7c97c5400402593491c74a06f74e6fac34d651937779af5e4b8538e73d5f99c745a1a810b06c23c644107d794e8befb37
SSDEEP

12288:ZN1zbYIUq89/DYW9iMNV3wkbKtiEl/RbOjMJ0EQ2jQyxD:hzb3W9znJW5bOoJ0j2j9

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

db868753ae5c1a3a6d6beed164150c09224cb5ec5163643a1bd3fb7b359abf3f
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

toBervices

Sections

CODE
Size: 326KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE