854ece96123d3c563462bd45f5e02c529155ddf8b80b3603220428651201459d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

854ece96123d3c563462bd45f5e02c529155ddf8b80b3603220428651201459d
Size

105KB
MD5

50d325f661c4affc666c1e34c8fb2f12
SHA1

4244aff9da42da07daf5507994b3a2da14fdca9e
SHA256

854ece96123d3c563462bd45f5e02c529155ddf8b80b3603220428651201459d
SHA512

97a108a7d001210734cd3fdb60024d3984fc6a479a8539767f8f2dee11f2488ac4c45e0f96ba9c1ba89d17accdd78369ceeb1fb55f31f7de36d0c47cd63778aa
SSDEEP

3072:lom8WRdFT+AX1HA4seukXDL8yiFVFXbv9oc1VX:umvpjHRuPyiFXFocfX

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

854ece96123d3c563462bd45f5e02c529155ddf8b80b3603220428651201459d
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.atext
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE