d5e5a8bb1442b859fbc8d1695e9e0e0f81fa319fb01b1d73f7996339512645b8

Sharing

Copy URL Twitter E-mail

General

Target

d5e5a8bb1442b859fbc8d1695e9e0e0f81fa319fb01b1d73f7996339512645b8
Size

461KB
MD5

00e188775e65fbdba73a5d1bf8316820
SHA1

276122fa33ed26ac2a98e4405330af46dd5b49f4
SHA256

d5e5a8bb1442b859fbc8d1695e9e0e0f81fa319fb01b1d73f7996339512645b8
SHA512

31923b8929389c1368d4a5d9a7333d853e20f5e2d1ea4e52f4e3660061e043edfe2133f963b7b0f9f1bf7956a4d2a1f30b050b748579b3922e8a9ec7b3ccc72a
SSDEEP

6144:9Azs/op2u0BPqaEIlD3z0l047UDlWw1K0gBv/5+68qWJPhyWSGsOQgbBvNGg1yWl:9+sbyX+D3z0AJzOwzVJs+LFbjGk+1LC

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

d5e5a8bb1442b859fbc8d1695e9e0e0f81fa319fb01b1d73f7996339512645b8
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

StartHook
StopHook
send_en

Sections

.text
Size: 138KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 14KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 138KB - Virtual size: 316KB

.rdata Size: 53KB - Virtual size: 56KB

.data Size: 11KB - Virtual size: 64KB

.SHARED Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 16KB

.vmp0 Size: 14KB - Virtual size: 40KB

.vmp1 Size: 219KB - Virtual size: 220KB

.reloc Size: 12KB - Virtual size: 20KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 138KB - Virtual size: 316KB

.rdata
Size: 53KB - Virtual size: 56KB

.data
Size: 11KB - Virtual size: 64KB

.SHARED
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 16KB

.vmp0
Size: 14KB - Virtual size: 40KB

.vmp1
Size: 219KB - Virtual size: 220KB

.reloc
Size: 12KB - Virtual size: 20KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB