b61ed7d772b9b47691a1472d533e463813af860515163839fca2e86df3d252b2

Sharing

Copy URL Twitter E-mail

General

Target

b61ed7d772b9b47691a1472d533e463813af860515163839fca2e86df3d252b2
Size

412KB
MD5

fdabe19fadcec697b4cd3a623a3e7a92
SHA1

090e4b2a80360854b8bff95c5f88e85af8f266a9
SHA256

b61ed7d772b9b47691a1472d533e463813af860515163839fca2e86df3d252b2
SHA512

2edbdd670a72efe9c374296fbc0cab8f2ea7e56bacabb2754b198643459a0853a71cd85fa8302392d5f9e93d9197a360af50043346676947a12e1b978ad8572b
SSDEEP

6144:jU92f1/cMv+DiecIt7aGMY8AeYodKXgZZuO7g1OZhZT/p2Zhpm8oo:jUEBV+DieTlynArC4g7uO7g1OZBYvqo

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

b61ed7d772b9b47691a1472d533e463813af860515163839fca2e86df3d252b2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 263KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dcbpils
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 263KB - Virtual size: 704KB

DATA Size: 15KB - Virtual size: 28KB

BSS Size: - Virtual size: 8KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 44KB

.rsrc Size: 32KB - Virtual size: 72KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: 31KB - Virtual size: 32KB

dcbpils Size: - Virtual size: 4KB

Size: 56KB - Virtual size: 60KB

CODE
Size: 263KB - Virtual size: 704KB

DATA
Size: 15KB - Virtual size: 28KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 44KB

.rsrc
Size: 32KB - Virtual size: 72KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: 31KB - Virtual size: 32KB

dcbpils
Size: - Virtual size: 4KB