05a978531144016628766b5080a1a1f60ad2071d2a95deca6c50c98a3671a72d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05a978531144016628766b5080a1a1f60ad2071d2a95deca6c50c98a3671a72d
Size

13KB
MD5

17067f77a0ee329076da42fbe7e2d370
SHA1

6da7a457582f3946234f5a003b3b81d737b79ea4
SHA256

05a978531144016628766b5080a1a1f60ad2071d2a95deca6c50c98a3671a72d
SHA512

19a7f84fb1a0326c2ca02082ce4116439d6b51f5da67df3b6300adda70a9189f8adc7843d60325e18214bb21764cc05e42f5380645aea2a98a4a9cfb9a062e4f
SSDEEP

384:bl09XpEH+vbpwRCX2HSi0EG+zVSoWoGTAxWr6+Y9PffPzJ:b6ZbphxbEG+zcoWoGkxZbPrJ

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

05a978531144016628766b5080a1a1f60ad2071d2a95deca6c50c98a3671a72d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE