0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2

General

Target
0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2
Size 4.0MB
Sample221107-3fsm2aeef6
SHA256 0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2
MD5 85b985e82b463d3f727afc8a8ff349a1
SHA1 c5ae7b582de514e3b49104c1d4bac595500fe61c
SHA512 dc8a69c8b5acc166bf8baededb81027202f313af07acbc3c102ef4268c76b50ec7b5d4defb1cb5ed78d081b0a84611fddb96046aaf2a9f6212d499eb6d885b0f
SSDEEP 98304:tJgug67CrzpFObJV0ypLd6r+DxnSQpCtlbvV0TAYP/RIBaQFIlxW0M:fgQ72cE8tDxnDpEbvVwAe/GDOlrM
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

File Explorer

0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2

.exe 4.0MB

0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2

SHA256 0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2
MD5 85b985e82b463d3f727afc8a8ff349a1
SHA1 c5ae7b582de514e3b49104c1d4bac595500fe61c
SHA512 dc8a69c8b5acc166bf8baededb81027202f313af07acbc3c102ef4268c76b50ec7b5d4defb1cb5ed78d081b0a84611fddb96046aaf2a9f6212d499eb6d885b0f
SSDEEP 98304:tJgug67CrzpFObJV0ypLd6r+DxnSQpCtlbvV0TAYP/RIBaQFIlxW0M:fgQ72cE8tDxnDpEbvVwAe/GDOlrM
MD5 SHA1 SHA512 SSDEEP

windows x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2

Minor OS version

Major OS version

Entry point

13094913

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

531KB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.4MB

Virtual Size

8.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

74KB

Virtual Size

680KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

78KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

0549f986d407ef60f55524c3d27b2b72f16038fb0cc13c27aabdde2fb3b3f9e2