bdde14f6d583189149fafb073f707e0451bb61759e778fe9f469bb6f8d98c323 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdde14f6d583189149fafb073f707e0451bb61759e778fe9f469bb6f8d98c323
Size

602KB
MD5

02d627d70b69dd5f00e152dd99e1e9ed
SHA1

75dea0b0c80a9b28495134d526e51bcc5afe7b52
SHA256

bdde14f6d583189149fafb073f707e0451bb61759e778fe9f469bb6f8d98c323
SHA512

67836ed6e8e0ae45782e7b5eab59c4c9852b81f263df0c58b561870cd86a9e5e5608956b7130a914a204d3d05de6272f75d962fd3cc2666d286955a0925bde0e
SSDEEP

12288:M3TdtLW5WIj1YSSdFxBvBSXyMzBUWb9lx/9AgHLo8OW+rB:2Dsj1dEBBcJ9nPx/igrp+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

bdde14f6d583189149fafb073f707e0451bb61759e778fe9f469bb6f8d98c323
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 302KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE