bfda0ab909734c70dad5dfa7ae376d23b807866802610020cc06c7d0a8c964b6 | Triage

Sharing

General

Target

bfda0ab909734c70dad5dfa7ae376d23b807866802610020cc06c7d0a8c964b6
Size

4.2MB
MD5

eb7da9ed664a380a02b4cd758f5bf950
SHA1

e2863c9848fa3523e99e8f134dcacacf8473bd36
SHA256

bfda0ab909734c70dad5dfa7ae376d23b807866802610020cc06c7d0a8c964b6
SHA512

2fa0429019f9988dacfd1ba91ce738a8f91ff7bdd02a5ebb97e37312aa7c1831df652b261d621a9908493b089b62d73395489d4689a99d8e5032073d146ada7e
SSDEEP

98304:2mtCTxBrIAm1nQtoPmtgJth4JhJMvz2iyp16FtjVGsCCkKX:2VbIAMQa+t26Jh2vz2iy76XZlCu

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

bfda0ab909734c70dad5dfa7ae376d23b807866802610020cc06c7d0a8c964b6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 617KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 199KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE