945e5f28cf461f5633a71e76e19c0b46604aae8b67b5b2129010f69b479c9e01 | Triage

Sharing

General

Target

945e5f28cf461f5633a71e76e19c0b46604aae8b67b5b2129010f69b479c9e01
Size

99KB
MD5

7860a8e0d7d9f690b69487984330a13d
SHA1

911b43a0b0de5f0f48b8e896ed11269f298c6ea1
SHA256

945e5f28cf461f5633a71e76e19c0b46604aae8b67b5b2129010f69b479c9e01
SHA512

d1d3b98407824515df5f9c58f82ff2b955e25417950a7e640c93bc6fb6204a3a480552036e5afecced5e647ad5c0fdc2868e22be4a328bd4e22dda62cae0f163
SSDEEP

1536:V5cwBgh0vrJ6vPIb7js8SifJROrlS+O6359JbDFzRBWEzI:mcwvP4SIYlBO63FtM

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

945e5f28cf461f5633a71e76e19c0b46604aae8b67b5b2129010f69b479c9e01
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

FakedInterface

Sections

.text
Size: 54KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yt
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE