8352b3f3d21c4f80c85c60e7231cfa691b4f8f4e49d1ab8fa0857e7b18c611b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8352b3f3d21c4f80c85c60e7231cfa691b4f8f4e49d1ab8fa0857e7b18c611b6
Size

744KB
MD5

c4aaf0e3ceed5b5f75e3074431be45a6
SHA1

153401bdd638e6f38ee06f5a9a79f86b2ff47d2d
SHA256

8352b3f3d21c4f80c85c60e7231cfa691b4f8f4e49d1ab8fa0857e7b18c611b6
SHA512

87ab5f34384fe4e73b75e4e7e3c8483c4294e4878f105ad09dcea6bb452fb794127034761e5c8876e9b072f642b4a3a24a188e442aaa6e550f78f57ab9d39257
SSDEEP

12288:4TJ2irTBG7sYwg2wNMbtoXMvrtyRDppGi0ADdUaCe8wjnfSUACyANXodrdq:eEic7sYDDcQZUaCejfGCa

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

8352b3f3d21c4f80c85c60e7231cfa691b4f8f4e49d1ab8fa0857e7b18c611b6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 400KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 207KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE