0882a3ec535e622f220f25cdb85058d8b7fdc9f3c3e08da74096d208c5d65df7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0882a3ec535e622f220f25cdb85058d8b7fdc9f3c3e08da74096d208c5d65df7
Size

312KB
MD5

01243eeca6053e6ff4427b632eb1f0f0
SHA1

e6dc9443e709341c814c959682b692d504a3e92d
SHA256

0882a3ec535e622f220f25cdb85058d8b7fdc9f3c3e08da74096d208c5d65df7
SHA512

fec260191fda8c5ceac84d1ee747d6b95312da9044eed05d42c6194a0ef14a24a9c76a2a53d2b9305966c4dbc8883c9a4f841f67ace49022a3216248970c86b7
SSDEEP

6144:fF8MoYIJutaHqDrg2EvzgAS1izpyAQePjH/snEaHE:fyZJut+qOm1i4HePjfsEaH

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

0882a3ec535e622f220f25cdb85058d8b7fdc9f3c3e08da74096d208c5d65df7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 196KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE