a4554d6bdb26dbc8be5a0a59654010e8713068b55b99d3144231c0e2a6af9686 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4554d6bdb26dbc8be5a0a59654010e8713068b55b99d3144231c0e2a6af9686
Size

689KB
MD5

cbfa46e96e8aac635a4f220797cc2db4
SHA1

bfd00872189e451b482a187ba8b813d5f7c21ae2
SHA256

a4554d6bdb26dbc8be5a0a59654010e8713068b55b99d3144231c0e2a6af9686
SHA512

851a45cc363755019578531227371a7a6ad6af0c8fdfb2ca9d3f0c2c91015ecbf970d8d7e599f26f73b684099aff124d6ea01e5b140a801bcd541f39337f0281
SSDEEP

12288:4LtUy1aS6V4THX9X993JQx2UdxPtYGcd5OMGh5qFTY9GH++NrSj4v2fQ/AWq:Ctt24Tt33JQkUxGvGhmTY9GHdJOfQ/a

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a4554d6bdb26dbc8be5a0a59654010e8713068b55b99d3144231c0e2a6af9686
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 210KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 415KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE