d871d9ca1c22be8e8cbb5418a09536bcc9befcf0a86e135400f666139b5c2a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d871d9ca1c22be8e8cbb5418a09536bcc9befcf0a86e135400f666139b5c2a4c
Size

126KB
MD5

08e3e5b75a280dabeab29d35105e8640
SHA1

c5c3037b099851a2ddef1e2434704904d0c16b6b
SHA256

d871d9ca1c22be8e8cbb5418a09536bcc9befcf0a86e135400f666139b5c2a4c
SHA512

874a4638adc5598b8458fb499de52d7e1e9bc5081ff6ff87379e6ac2735161ae6a1e3dd0484ea53f0d0b91798bc9560f4b199ec944d5e15e9d6ceaccf50d8456
SSDEEP

3072:FUGTlCkJD0++Xv7PoTJWvZQWKAl2XwiQiOcCAfud:KGTpW5/To0yU0Cz

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d871d9ca1c22be8e8cbb5418a09536bcc9befcf0a86e135400f666139b5c2a4c
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE