5195bde11ae746faffbde0ce66503f2f4299c0d27408160e4de829e281707ccd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5195bde11ae746faffbde0ce66503f2f4299c0d27408160e4de829e281707ccd
Size

333KB
MD5

319f4a912dd5bdf2e8110706386bf8b0
SHA1

ec77ae93ed45c3008a63cbae89a16e384ca22d19
SHA256

5195bde11ae746faffbde0ce66503f2f4299c0d27408160e4de829e281707ccd
SHA512

e6645e8db3327511170d840793f6b52f476b43e6c77e01a481cf92a210c0ead7958aa605193a8b9c0eebd13cdc81096013695dcf0aca87cdf529ab53c0ac7073
SSDEEP

6144:wQycBHe++UQ0aXi+ZXMQvygszYJauS7XIxcOhHvz/3ZfTADVB0Kw5pE2doa:3yT++RXi+ilaS7Yx9r31UDxww2d

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

5195bde11ae746faffbde0ce66503f2f4299c0d27408160e4de829e281707ccd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 260KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KABA
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE