c395336e5e1161ec5c6789bbb73f3bbcebd19d97cf628a0c5f4b044ca9b54b8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c395336e5e1161ec5c6789bbb73f3bbcebd19d97cf628a0c5f4b044ca9b54b8e
Size

371KB
MD5

e7b9b0e9829ab309ad7af45b1d0d5334
SHA1

098f8bf198e74a4bc2804fd34c86f6477b0966a1
SHA256

c395336e5e1161ec5c6789bbb73f3bbcebd19d97cf628a0c5f4b044ca9b54b8e
SHA512

cc4989a5bfb79be2c231eba87859c9fff7a953fe79d1422ce7b3fdd3413e9afbc6c3711025d93445673044c808dce36bd71bbecd9431e480b4d28912a9cd86ee
SSDEEP

6144:YpdKUovkXw5OkxbuLmSvtpwFOD0WUq1LtIyQgvP15smXZpJJircuvNuQwphmI9:YpdKBvo6Svtj31LKIP15smZklxNs

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c395336e5e1161ec5c6789bbb73f3bbcebd19d97cf628a0c5f4b044ca9b54b8e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WMYS
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE