1406dab7aeece50a5b9b4780a58859d5c19e2238273cdffa51601ad0696a2fd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1406dab7aeece50a5b9b4780a58859d5c19e2238273cdffa51601ad0696a2fd5
Size

43KB
MD5

04450008121d42326bab6fde6936af08
SHA1

84d800deb70be6c75faf19ace0a84f857417166d
SHA256

1406dab7aeece50a5b9b4780a58859d5c19e2238273cdffa51601ad0696a2fd5
SHA512

6617b1826a1b5fd4f8cf89c4b4b9cf5d74892f5b90eb48875d9327712f9820d713124b1818c457450fe91719a523322c3ea5959b6ecd35a0ffe6eb6100a7771c
SSDEEP

768:CvIQu9IyivhYnFR5Rtqp7fne9RrhxJjzgx23wEaHZDA0wWUGUxoLfbfr:W/+IyV/5Dqp7fne9RrGx23wJ80wWUcDr

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

1406dab7aeece50a5b9b4780a58859d5c19e2238273cdffa51601ad0696a2fd5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 19KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE