1d44067f2e33318193e3a2bd4d8c7ca212bb740805fd1859f7a4a1a2949ef8a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d44067f2e33318193e3a2bd4d8c7ca212bb740805fd1859f7a4a1a2949ef8a8
Size

99KB
MD5

09645b0997ae86742d7c742160267cb0
SHA1

40bb54f604cc5041419661b78eccdecb86c2c91c
SHA256

1d44067f2e33318193e3a2bd4d8c7ca212bb740805fd1859f7a4a1a2949ef8a8
SHA512

34458a87f5a23605468d23ea20783c62e118588978a4ee1efa100f767c83787788154dbe81f99899461e4eb433f1adfae4013eaaba4bb883c4ca1ccaea72c144
SSDEEP

1536:Y6zGGiHWgQvnC1IWD4QXGYjrUyisrYcpdbGkCzIzR3RSToWJncu:9iL1mQXDSCdseZoTow

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

1d44067f2e33318193e3a2bd4d8c7ca212bb740805fd1859f7a4a1a2949ef8a8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE