2f0ef045cda79eaa2ffbc0087c03341a814748a1d2ef8d9169e04ad1004b0644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f0ef045cda79eaa2ffbc0087c03341a814748a1d2ef8d9169e04ad1004b0644
Size

51KB
MD5

645ea1a8719568fe7a287b2252c7c7a7
SHA1

33bb3d5bbaa33ff79a66902ed98f13c8c7482913
SHA256

2f0ef045cda79eaa2ffbc0087c03341a814748a1d2ef8d9169e04ad1004b0644
SHA512

645e4e3fda52d6b2f5e36b1359e36b2e102d0d12d54ea266a729f921ec246d6b4eba152e6ecee4eb08ca074a40a84a0af209e0eadc46acedcbf22c19c1743cf0
SSDEEP

768:Fae7OLtRFLm5Tvxh0s+g45g/7y2B4w5GOebeJu/HDFEiET0RJG/JxHLoIr:F5Giv7V42G2Ow5jebe6j2dT0RJUV

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

2f0ef045cda79eaa2ffbc0087c03341a814748a1d2ef8d9169e04ad1004b0644
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 41KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE