350b8d503b66a483fce44ebac3810ef6ad166f7af4884f1df54928f6123b54dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

350b8d503b66a483fce44ebac3810ef6ad166f7af4884f1df54928f6123b54dd
Size

75KB
MD5

f0a5bafde768de3b9060b2c19e2a4b97
SHA1

67506fac595de52409a6b229d4eeb0a504b2ab43
SHA256

350b8d503b66a483fce44ebac3810ef6ad166f7af4884f1df54928f6123b54dd
SHA512

ddf9085a2fdf30489f464d31f082eb4b06a8e171251f26d13a5082a210f4d1c3d5f8b5c20ff65bb0f06bb5e3e7a85e7ab4c4d16bc084349afeec448c1014a0dc
SSDEEP

1536:yNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mb:yafeb+mzADwRuQYqfcb

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

350b8d503b66a483fce44ebac3810ef6ad166f7af4884f1df54928f6123b54dd
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE