d9435905c47a2170b8da7380075b9aa1eb8114179a5277a3a84cc6c2d9fac9ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9435905c47a2170b8da7380075b9aa1eb8114179a5277a3a84cc6c2d9fac9ee
Size

108KB
MD5

43eca66cb58feb093df449235bc8a2b5
SHA1

dd125abd2f0b94c200f4a52b6b2b6dff3e3cb8fc
SHA256

d9435905c47a2170b8da7380075b9aa1eb8114179a5277a3a84cc6c2d9fac9ee
SHA512

ec01fabc5db284314142c2322ed3971a24c8cf0e0a179264137b0cf8db731a5ddc28cfe5daa089f4b48ce0b5a7e6a82c4dadd24a963ea994b4dfa003bc2df79d
SSDEEP

1536:QmOTMT/PqCpfK7zLyjQRxcyV/Bi7es3ibQ9mIvI0vcQfr+vTW1s/NQpRwH:QmO8/P3pfK/mjQReyRBiSRqcQfybVaI

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d9435905c47a2170b8da7380075b9aa1eb8114179a5277a3a84cc6c2d9fac9ee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 86KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pmj
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE