0c455a16074e86f75f1a1cb84d226a7d3cd1c6f28705e9992cdcf1d97701d1a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c455a16074e86f75f1a1cb84d226a7d3cd1c6f28705e9992cdcf1d97701d1a5
Size

2.8MB
MD5

8ef3193ef9b0ab325d67953ed9058aa2
SHA1

65c1c9d95fe5446289b1c51504f993dec6e04954
SHA256

0c455a16074e86f75f1a1cb84d226a7d3cd1c6f28705e9992cdcf1d97701d1a5
SHA512

76a636ee8c47e20b0894c81b25965f731d11730c0c83b989c79f4ea48f5c02265e68ba0d113cba19477930093311456f9f1c4b4334ae8b0377d0679f81c2ae81
SSDEEP

49152:67T8eBbAR087h6um0dwlj8ID9QBjya15grYxE7P+SRTJ1+xcTnn:uMNh67eCBD9QBjj8YxE7P/RTIcT

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

0c455a16074e86f75f1a1cb84d226a7d3cd1c6f28705e9992cdcf1d97701d1a5
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ETSCJ

Sections

.text
Size: 96KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 687KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE