4e61e596decd6f9e8953d0f2a4427defdd7aac9103a6f560f7e93002b63096b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e61e596decd6f9e8953d0f2a4427defdd7aac9103a6f560f7e93002b63096b0
Size

44KB
MD5

7d309fef6e5d8da97e0ec52177929e78
SHA1

1a517fbfda12f09019f99a126d8b7e48a66f9dc0
SHA256

4e61e596decd6f9e8953d0f2a4427defdd7aac9103a6f560f7e93002b63096b0
SHA512

caee2d572f116c24e4f4e14beda444da809a05fa595048d1d8690bfd4a5b9e878421ccbfbb97d6042dc44e34e37b5939e04cc415b1ef984ea31636e85a1f6637
SSDEEP

768:MdY7IO3DCNUTtcQSrv9SjGkwrABKCbzKbNSlwvBeiFozywIWhGaxMbPrrM1:M2E2Nx+9+GkjoZeIouwIWheQ

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

4e61e596decd6f9e8953d0f2a4427defdd7aac9103a6f560f7e93002b63096b0
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE