9b3b2399f644966f0914ad6a11a2fe47a89348e20210790cdad2c28befd13aae | Triage

Sharing

General

Target

9b3b2399f644966f0914ad6a11a2fe47a89348e20210790cdad2c28befd13aae
Size

925KB
MD5

22606cec2d56841f7bfdbb59271d7c66
SHA1

3286992c880f348451336bad807658e024bc44f9
SHA256

9b3b2399f644966f0914ad6a11a2fe47a89348e20210790cdad2c28befd13aae
SHA512

51177889af7c7cfebce625e6e41f3c5c301eea8e5a54a8e15ffa56009bbf8b139b4aa6c6619822df9916494452097df0a66f56e9c91be0b26c85eb4f95098767
SSDEEP

24576:wg29F3DmMXKhykwIeryHhiIkqJ8H9DRPB:wgwBDmdkkmuHrklDRPB

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9b3b2399f644966f0914ad6a11a2fe47a89348e20210790cdad2c28befd13aae
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

svchost

Sections

.text
Size: 342KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 29KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE