6af5dcd86f242fce001d1f8bec24f65af20420161636bcd8f27abf6373d1b1cd | Triage

Sharing

General

Target

6af5dcd86f242fce001d1f8bec24f65af20420161636bcd8f27abf6373d1b1cd
Size

4.0MB
MD5

ed66a0ef198a1b93fcd7ea90691a74aa
SHA1

3db48debea43bc88e5badfdd89618d51343a78e7
SHA256

6af5dcd86f242fce001d1f8bec24f65af20420161636bcd8f27abf6373d1b1cd
SHA512

0bf0fe2c5d6a58abea71f43cbf8e1ee19da5881790b4abb684cf29aaad9e0c16a45cf83a2f696640433b7ffbe24444bb1f2cf026a05cbd3d85729bd81ec574c8
SSDEEP

98304:WBLaX2XjPrbVGbFWMZNA2wITWuXIu/M1vrGp1oVXt:YLaWrh3WNVwWWuz/M1vqpeXt

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6af5dcd86f242fce001d1f8bec24f65af20420161636bcd8f27abf6373d1b1cd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 531KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 74KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE