f190f2cfd859c6a0dd87c1d883872936ae3e3bf6b0d9fb4c1c6b36ffe0cfc87a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f190f2cfd859c6a0dd87c1d883872936ae3e3bf6b0d9fb4c1c6b36ffe0cfc87a
Size

656KB
MD5

6739ec70e5397a0a299cf8953394b994
SHA1

b4108a5748aa851a7e62c65f173d100f821dafc7
SHA256

f190f2cfd859c6a0dd87c1d883872936ae3e3bf6b0d9fb4c1c6b36ffe0cfc87a
SHA512

8f02ccbd3ec2fa487568e36edba85c1871537d6426610c4f4e3326b2dceeb8171e3fa7cc6fb44add76975fb0281e905564571bce689455468a3fbbb906c55f92
SSDEEP

12288:loAVA7V9HdGmLtMgd5Gch08VdGdDAi1AbCGnLMh1TC7z9MgHGH51+zFxezpW:l+/HdGmagGAtOAi1AbxnLMh9wj0Xz

Score

8^/10

aspackv2 themida

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

f190f2cfd859c6a0dd87c1d883872936ae3e3bf6b0d9fb4c1c6b36ffe0cfc87a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 14KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 579KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE