d8ca910f256cd76af2496e55cb8f7b078bb18752e26f716d70488c20eb8e641e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8ca910f256cd76af2496e55cb8f7b078bb18752e26f716d70488c20eb8e641e
Size

335KB
MD5

d1d1a15dae84f9e50cf6cd8a936bd340
SHA1

14ed18f7b2c7ef208e84e658802dd3b31a57b4f2
SHA256

d8ca910f256cd76af2496e55cb8f7b078bb18752e26f716d70488c20eb8e641e
SHA512

416013b9884ef56c066729f14bb1bb6c9cb3da07c3f23468c3f006b2b3ba7f5523b82b7fdec1cbd2e24f41f490d82caf0e538d407f62b0de3968c78910b6fc11
SSDEEP

6144:lz+/v1CMbr7HmG7eLPzBDlnZV/V55+iEDlyelEoGn+jpvI6J2MDwxwVT9/9bFS+q:ivJr757KPDZVx+9Dly2Eobjpw64M0xwT

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d8ca910f256cd76af2496e55cb8f7b078bb18752e26f716d70488c20eb8e641e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 257KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE