19c14ca6173117323b48624d93c0cb0823c741df91017ae0015c8db6aed1217d | Triage

Sharing

General

Target

19c14ca6173117323b48624d93c0cb0823c741df91017ae0015c8db6aed1217d
Size

434KB
MD5

f8d05007ae88e61aec1c5643a2a0bec3
SHA1

dfe5089be3658af9192ae12c62fdcab440d5039c
SHA256

19c14ca6173117323b48624d93c0cb0823c741df91017ae0015c8db6aed1217d
SHA512

d7ff8d458082b9166b0ccc429a93c1529c820a6991d360d74b1bf0ef422f32f3e876f32614e7803ffc9d25d7ebcc4cf5c2a27fedca8d346ddcc3a735b18b9115
SSDEEP

6144:Tg07JKSLE60u17Iv3uATHUoupegtZTq6xpM9HFF9eFLBy9lMNJV:E03uWU2cH4pJ/Tq6E9H30LD

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

19c14ca6173117323b48624d93c0cb0823c741df91017ae0015c8db6aed1217d
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Hello
ok

Sections

.text
Size: 273KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE