79ca87a466dfd48f6d88059499e462fad2e778028c44b566ce9e74bab2687b8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79ca87a466dfd48f6d88059499e462fad2e778028c44b566ce9e74bab2687b8a
Size

689KB
MD5

c9c02e3f0cf31229af13bfb66a5d45dc
SHA1

44626cf9be88ccb235cd2d7e4d63e68e738b3f0e
SHA256

79ca87a466dfd48f6d88059499e462fad2e778028c44b566ce9e74bab2687b8a
SHA512

1eefcbc2ae7b6897a6b23d419f7a968997bc943d7f2b9a89c48539ba2f4c57efcf6dd5b03ae811290031b0fd06e4358dcd0566c1b4d501143f02a2f2d1ea0185
SSDEEP

12288:pOIbYrSm4cv0TygQYfYfX993JQx2UdxPtYGcd5OMGh5qFTY9GH++NrSj4v2fQ/Ab:hqPN6Yf33JQkUxGvGhmTY9GHdJOfQ/a

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

79ca87a466dfd48f6d88059499e462fad2e778028c44b566ce9e74bab2687b8a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 210KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 415KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE