9e74f86339842850e3822f8a43d0578010d67684903c89a8d3e86d3b348be5d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e74f86339842850e3822f8a43d0578010d67684903c89a8d3e86d3b348be5d1
Size

235KB
MD5

0ef1123b2f28fb0b8e0d64fe31b4a46e
SHA1

9f46432a0a6d66cb0b7882a9a7d378e36c7d3379
SHA256

9e74f86339842850e3822f8a43d0578010d67684903c89a8d3e86d3b348be5d1
SHA512

c3d22639ab1a7851fce3b3e1dd6dae2aebf90ba99cde9c0b15a072f860cc262534058530d7ba86ad9ff46206e68f7ba797bcbf0d5dd361718bb0b4cd95af3166
SSDEEP

3072:RB7Hpps4fuAd8KXiyqehf9JxHWCZs5ldiGVUlKGsjb8ugCEjU2UL4Ccd15y5X/hR:HhKKXGaHs5jiGVKkblgCEjocdG5CCCu

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9e74f86339842850e3822f8a43d0578010d67684903c89a8d3e86d3b348be5d1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 137KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

njlxzvk
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE