fafff00278dbe31a56478fafea26a87037a6da59b007f3af098d8db2486d4d8d

Sharing

Copy URL Twitter E-mail

General

Target

fafff00278dbe31a56478fafea26a87037a6da59b007f3af098d8db2486d4d8d
Size

621KB
MD5

0f807b1b475f5263d9177e4f77b411b0
SHA1

616b11855f1ba0b884c1f0a93fa8b033c7b8e2d1
SHA256

fafff00278dbe31a56478fafea26a87037a6da59b007f3af098d8db2486d4d8d
SHA512

ee59ca8c8c6f5a1d29e482e3d269e141e242a47d6076281fe2a6c205a2dc075517ac42a49096d7f5b9f302c56b6f789dda930814418b1a7ddf91a5d0fd8b9251
SSDEEP

12288:T5aCuQUY0nJRzaw2s0kCttOD6khIB5Adfzhe/4eQ5tXez3AcMwE4rNIbwFP:TkCu3zj2w96ODg5+fzC4eQrX6A/38FP

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

fafff00278dbe31a56478fafea26a87037a6da59b007f3af098d8db2486d4d8d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 477KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f#d8D0
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 477KB - Virtual size: 1.5MB

.itext Size: 2KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 120KB

.bss Size: 1KB - Virtual size: 404KB

.idata Size: 4KB - Virtual size: 16KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 96KB

.rsrc Size: 106KB - Virtual size: 352KB

.aspack Size: 3KB - Virtual size: 8KB

.f#d8D0 Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 477KB - Virtual size: 1.5MB

.itext
Size: 2KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 120KB

.bss
Size: 1KB - Virtual size: 404KB

.idata
Size: 4KB - Virtual size: 16KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 96KB

.rsrc
Size: 106KB - Virtual size: 352KB

.aspack
Size: 3KB - Virtual size: 8KB

.f#d8D0
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB