514898d304110dc28f41c1d3ae886e3453d88d9dc3b7bd36ab82e26c1bff296c | Triage

Sharing

General

Target

514898d304110dc28f41c1d3ae886e3453d88d9dc3b7bd36ab82e26c1bff296c
Size

451KB
MD5

15f8f6a91b65c657870ec2515963ab80
SHA1

70317d48dfb1b96a4ef94642f77e15ec43073023
SHA256

514898d304110dc28f41c1d3ae886e3453d88d9dc3b7bd36ab82e26c1bff296c
SHA512

cc9a0f9ba80ac70f57de3bce24f992e68a3bd1dbc4c3b880bc79cd8cab53c55c09e170de58a65028ec90823a43e547971b3f82fff0efc31376a9a497c9292898
SSDEEP

12288:I5oPv3nvjOPzNLaS5wqCCoBH+pa1xBZ4rJtyRwmn/aCy4z:IaX3vjOrNLaSSUY1FYtyROaz

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

514898d304110dc28f41c1d3ae886e3453d88d9dc3b7bd36ab82e26c1bff296c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 333KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE