9650933b458e1d331bd043e16653bd94450e791e98160d371a87bd2dfddc2cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9650933b458e1d331bd043e16653bd94450e791e98160d371a87bd2dfddc2cf1
Size

815KB
MD5

3f5244aa419a6c51636c17e2cb5ceaea
SHA1

1a18f3a46009d1abb3b389a0c73a60cb46f2528c
SHA256

9650933b458e1d331bd043e16653bd94450e791e98160d371a87bd2dfddc2cf1
SHA512

f7b5533f2b8b79112347cd380286b08ca80a40baa4904b7e7f525f42b4b7efadcd6cb7e3e2dcbedf1522e7bbaaaf6a87877e3761c3a843cde893780290e1a0ee
SSDEEP

12288:zoa9WcHljRRgtBt3UPqb4b0JNEd5aveRam+Het9WPx+ONcg070ddyW2VeHV2FqL:99v1RWtkam+HetQP9jw60VeHV2cL

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9650933b458e1d331bd043e16653bd94450e791e98160d371a87bd2dfddc2cf1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 581KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 165KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dll
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE