81a1b66898502490ea00c4a3a68732255b05db59692dd0bc9e4367272fc464b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81a1b66898502490ea00c4a3a68732255b05db59692dd0bc9e4367272fc464b8
Size

298KB
MD5

688f0e35f42029cee5bdf96f07c5c204
SHA1

c21798583f8e2727d6647368526192ded5f624ff
SHA256

81a1b66898502490ea00c4a3a68732255b05db59692dd0bc9e4367272fc464b8
SHA512

2a311fa74a748761a0fb05d86e09d5b88ad259ddeef6df735988365ffb07d857e7653e6ef34b1a6843ff8882ba7c7dc0bf276fc62a9b51bf130c241aaafde8cf
SSDEEP

3072:iUdv8Zim/qoRcLH5Qj8z578v/P/FGNgkf+El48UOmmiC2UGkEK+gHei1ktYcXwNS:ld8Z3J45a/P/FGikWEl48U2EKVT1U5X7

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

81a1b66898502490ea00c4a3a68732255b05db59692dd0bc9e4367272fc464b8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 133KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE