5bbd9178a81f884fb5075b83b13d81e34381681a7264510bf8d7ba6c2cb1c93e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bbd9178a81f884fb5075b83b13d81e34381681a7264510bf8d7ba6c2cb1c93e
Size

42KB
MD5

603fc179911c9a319fcacf875e642d58
SHA1

da0cbb301b2580d071b14b0973788c1a6985ac36
SHA256

5bbd9178a81f884fb5075b83b13d81e34381681a7264510bf8d7ba6c2cb1c93e
SHA512

a267bc081cda37f5a7bf1567962c3e319079305fe610758e0619451c33f1f4152127c0482251d4a302ca1b80861e8a2bddc8262866bb0fbaee3066bc47865092
SSDEEP

768:gyz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888y:hzOCay4wV339rPjzbpLwRJ9pSdoIz

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

5bbd9178a81f884fb5075b83b13d81e34381681a7264510bf8d7ba6c2cb1c93e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE