4f1286e7c2c3f69075486bf0c0082931cca3ab2e72151422cc8528f913d7d465

Sharing

Copy URL

Twitter E-mail

General

Target

4f1286e7c2c3f69075486bf0c0082931cca3ab2e72151422cc8528f913d7d465
Size

251KB
MD5

00c0534e061a6ab97371fd1313c30609
SHA1

5d01630cbdcd5b7ab27f8b2f2789d7196c89cbd5
SHA256

4f1286e7c2c3f69075486bf0c0082931cca3ab2e72151422cc8528f913d7d465
SHA512

dfc2d2c63b3882226a0739b1c3ad8a2801c345502256cd5f60af0491a8bb55bfd0d4b604f9d654168255dc48964e06cfa3055e537622a5858ac85b68b89107af
SSDEEP

6144:Md89bQe0W3894eETPBx1mLxvL4R98hfxx/I+NunxTTKVe2ZMJS:Md86zWwfGPBx1mLxvL4/o/I+QnZT

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

4f1286e7c2c3f69075486bf0c0082931cca3ab2e72151422cc8528f913d7d465
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 223KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 223KB - Virtual size: 556KB

DATA Size: 5KB - Virtual size: 12KB

BSS Size: - Virtual size: 12KB

.idata Size: 1KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 40KB

.rsrc Size: 6KB - Virtual size: 20KB

.MaskPE Size: 512B - Virtual size: 12KB

.MaskPE Size: 4KB - Virtual size: 12KB

.aspack Size: 3KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.aspack Size: 8KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

CODE
Size: 223KB - Virtual size: 556KB

DATA
Size: 5KB - Virtual size: 12KB

BSS
Size: - Virtual size: 12KB

.idata
Size: 1KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 40KB

.rsrc
Size: 6KB - Virtual size: 20KB

.MaskPE
Size: 512B - Virtual size: 12KB

.MaskPE
Size: 4KB - Virtual size: 12KB

.aspack
Size: 3KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB

.aspack
Size: 8KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB