faacfbeaa73cc2d66ab878747da180b65a025a0e3eba6557cd1c72cd30be5729 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faacfbeaa73cc2d66ab878747da180b65a025a0e3eba6557cd1c72cd30be5729
Size

2.2MB
MD5

f21d29d11f83cd98b946947ae0ca9094
SHA1

d01d0d0b82ed03626dc13c8028a0dea4751977c4
SHA256

faacfbeaa73cc2d66ab878747da180b65a025a0e3eba6557cd1c72cd30be5729
SHA512

57cc0b0c6bf253dbbc17a0595975315f8741ca124d4042e55e3a33487e10392b44cf5e68443c8693250479cedd2a3ef540883c8962e77e02167a01760cfce8f1
SSDEEP

49152:0Elmf+AVVbyWu/FxL1+4Cu/OZjWSIrJo3Z1JiMs11hed9V:BlmBVu+u/OZiS4o3PJnstO

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

faacfbeaa73cc2d66ab878747da180b65a025a0e3eba6557cd1c72cd30be5729
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 638KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 363KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE