c2b4be89f5cf85cf86c5a4512a485d4c0eef1261ceb6a1bc349fd01bee6c5e7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2b4be89f5cf85cf86c5a4512a485d4c0eef1261ceb6a1bc349fd01bee6c5e7d
Size

26KB
MD5

4290dc5be1c0cfae38d01ff385175170
SHA1

2f74bcd73fd32af031bccf225a8161d5fa01453b
SHA256

c2b4be89f5cf85cf86c5a4512a485d4c0eef1261ceb6a1bc349fd01bee6c5e7d
SHA512

952dc5eb24bb36d486969543e8d6d8cd7c8a1cde779fb05c7ecf87a297df3ef280f700a8f57079c918502f11552df4fa3b00221ac3d8bef5ba5f9680b2d6d336
SSDEEP

768:SFOU+JiJn1rn1co0JiEEQVyelnTWMG7xoLfb8:SFdSiJTcfJihQVy2WMhA

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c2b4be89f5cf85cf86c5a4512a485d4c0eef1261ceb6a1bc349fd01bee6c5e7d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE