88256ee742ac25b9b8ecdda3993f6db3e56df522324cf724b8777987041bb568 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88256ee742ac25b9b8ecdda3993f6db3e56df522324cf724b8777987041bb568
Size

4.3MB
MD5

1f9a12a592068374f7b6b021f3ccca2c
SHA1

be8351522d4c8211bc7ed401a174c685c3dbbaad
SHA256

88256ee742ac25b9b8ecdda3993f6db3e56df522324cf724b8777987041bb568
SHA512

de391d45c8ac1cfc47510043c2f8d6bb1c21168ec6595cc1e1f6e3907ea6780574d77e58598398f195c937afe5ec7d8349f0761c6ddbcb9f9bc34366f9459f95
SSDEEP

98304:MpkVzVPhQkiqjVi6o2ePVV75dEKAcs7+VA+j6UT0tAWPrciRrW:NPP2kbjViQq70KACWLtDrciRr

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

88256ee742ac25b9b8ecdda3993f6db3e56df522324cf724b8777987041bb568
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 237KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.1MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE