b34449feeb7a74af75ad2e4a2b70bd573a88a58c4a3a80960c3ea60bdb86db96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34449feeb7a74af75ad2e4a2b70bd573a88a58c4a3a80960c3ea60bdb86db96
Size

180KB
MD5

658287cdb3cc222242adc8f1e52cb780
SHA1

df3279bd9c458e1d91209da69657ff772651950c
SHA256

b34449feeb7a74af75ad2e4a2b70bd573a88a58c4a3a80960c3ea60bdb86db96
SHA512

688d157f40390775e779bfc9c51fc0cd8b16d34c7d791ad82a2ce57d2c6a75b68646871c31062d2985507a8882d58b1f3b034573222d88294d3d42e9d01155a3
SSDEEP

3072:pVZ0Qi3LAdvt0fE3zmFAyECmpn6baEd6EbTudKQsvEYtdYdoo3PVW7VG:/Zb8AdkEwtmldEdl/ud+sYAdZNv

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b34449feeb7a74af75ad2e4a2b70bd573a88a58c4a3a80960c3ea60bdb86db96
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE