bd80c6b6e710526d1a190be4fb511ff1c29c6f40f56a8459501b304baeac80c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd80c6b6e710526d1a190be4fb511ff1c29c6f40f56a8459501b304baeac80c9
Size

918KB
MD5

69c05d97f9b9912a05ee55aa1e9a5b70
SHA1

1294fafae7b1d1b5fa627f02005fa1a1171f166a
SHA256

bd80c6b6e710526d1a190be4fb511ff1c29c6f40f56a8459501b304baeac80c9
SHA512

b9dc93697599d2c5c1b3312029d4aa9890792e838fdb1a22450cbf6666c7a0d0e1872a43a9510c0d5e187e00b4dceb45fd2a700c501364a5fe850f21fb3e931c
SSDEEP

12288:m3TdtLW5WIj1YSSdFxBvBSXUKL9YC8IB9P2vurTSqUMaCTqHc3qwe3J0RahA29iv:QDsj1dEBBcvbvjPFrTSZMGy/vRaZEv

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

bd80c6b6e710526d1a190be4fb511ff1c29c6f40f56a8459501b304baeac80c9
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 418KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE