2166465017ad22eb6541e33ee621d5da409615028b301dbcddfa31fa7ae56cab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2166465017ad22eb6541e33ee621d5da409615028b301dbcddfa31fa7ae56cab
Size

386KB
MD5

10111cf24fe41ffea8d34f87d6d9b891
SHA1

68a0530148825de9609f02061c3f8f3a8468113a
SHA256

2166465017ad22eb6541e33ee621d5da409615028b301dbcddfa31fa7ae56cab
SHA512

8a4b65d0a98cf2f622c60ba9845d985b0d36379fa9c5d3d98d6e50d2ddb028a3e34c6c93708f661de66900d52e2b58406194f293261fd86ce2387b25980192c5
SSDEEP

12288:bnwuf9IPqai4Uo67Z3o6cwYx+u5DeqUfD7rOCVGS//05AzkZ+ciW2jAhZ9e:b59mqaiS95e

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

2166465017ad22eb6541e33ee621d5da409615028b301dbcddfa31fa7ae56cab
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

myfunc

Sections

.text
Size: 245KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE