407fcab7a4e726324302a1e3b072f79e760e609bfc68f7360e24e6f3a3ea2397 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

407fcab7a4e726324302a1e3b072f79e760e609bfc68f7360e24e6f3a3ea2397
Size

1.3MB
MD5

a667ee192ba5b0ce78148d406699aeae
SHA1

7f1b1a39f7a8dff451741b16949da954765acb8f
SHA256

407fcab7a4e726324302a1e3b072f79e760e609bfc68f7360e24e6f3a3ea2397
SHA512

2c4c1a079090c6e32434391e5dbd8eb13cdad41cf4f304fdd6965465000167efcbf49e04067745efba7cc0f91b73a30f13e11debbc96b13d76cb3fd0b4345095
SSDEEP

24576:hduDMxDCKwLYQ6CJosH9rXinw8PHhiIHhnOr3unP8:hdpDCK+Y1Moc918PHrEr3+8

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

407fcab7a4e726324302a1e3b072f79e760e609bfc68f7360e24e6f3a3ea2397
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

svchost

Sections

.text
Size: 326KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 29KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE