606146a2da9cc5c5ff96e8f7741ef19c76641d8c5c2a039f553c4d3a49162138 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

606146a2da9cc5c5ff96e8f7741ef19c76641d8c5c2a039f553c4d3a49162138
Size

2.4MB
MD5

264053aaeb7514e3a4704020081ca29a
SHA1

49bf8f78bb4e69ca38d658bb8a3eafb443a38e2e
SHA256

606146a2da9cc5c5ff96e8f7741ef19c76641d8c5c2a039f553c4d3a49162138
SHA512

f9e90e9adc870359f449965950842129fd0e4a60388eea5a965f6b80ea9bef7d60c254418011cce56452909fd77effdc9cec156327a0f5489d1a6b8b46c99063
SSDEEP

12288:v3TdtLW5WIj1YSSdFxd3TdtLW5WIj1YSSZKhvM2JFMf7y/70AZdJdkZD1pSIh:fDsj1dEVDsj1dPvF0y/AOy1pSIh

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

606146a2da9cc5c5ff96e8f7741ef19c76641d8c5c2a039f553c4d3a49162138
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 372KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA