bb0cc87b1de9a3e71b1ed6cef80c22a3d7e097fa1672f217949175df032fb7ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb0cc87b1de9a3e71b1ed6cef80c22a3d7e097fa1672f217949175df032fb7ef
Size

575KB
MD5

a29317d4acdb156806eed2bb970017f0
SHA1

3f3d7b03f4d79b32637e4ddeba4622567179fe61
SHA256

bb0cc87b1de9a3e71b1ed6cef80c22a3d7e097fa1672f217949175df032fb7ef
SHA512

dbb722ea6958e8f7c2e8a59cc06436a0cde96e3f7c0e78a299faee65017e48d2452ab874188d19cacee72a3de9b7f127dc4132b188cce336f7c48ce9eedd8c26
SSDEEP

6144:HgC6QXqw9MDJTDEpULgU8L94jDV9U1woU8LSHP0x8Taj9q:Hl6QXqw9MRDEpUE9QDV9U11S5

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

bb0cc87b1de9a3e71b1ed6cef80c22a3d7e097fa1672f217949175df032fb7ef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE