ddd58e19ef2954792db0f64c28085c934ff87247508ad7f61e5a0677decbb5f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd58e19ef2954792db0f64c28085c934ff87247508ad7f61e5a0677decbb5f8
Size

645KB
MD5

69802642e005091073c97ae502dd39a9
SHA1

898a347b423a93ea514504ae05536ca52678cb5b
SHA256

ddd58e19ef2954792db0f64c28085c934ff87247508ad7f61e5a0677decbb5f8
SHA512

f6da6783d8c405866b2f687de9e3e1b085f6bd1edaecd970d228d5a7931be81618497b1137611688b9f46952f807d820bcb2e17e9235ed148465fbd838330e4d
SSDEEP

12288:o3TdtLW5WIj1YSSdFxWBSXyMzBUWb9lx/9AgHLo8OW+rB:CDsj1dEGBcJ9nPx/igrp+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ddd58e19ef2954792db0f64c28085c934ff87247508ad7f61e5a0677decbb5f8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ