ff65b2c8def38b91397b5d647cdf67343e5ad5861384f1153a6f267420cc43d1 | Triage

Sharing

General

Target

ff65b2c8def38b91397b5d647cdf67343e5ad5861384f1153a6f267420cc43d1
Size

4.0MB
MD5

c542d5094d71800d86229dd4ed139072
SHA1

8018686b2fc9884e254b6d2606b8af946d6ae50d
SHA256

ff65b2c8def38b91397b5d647cdf67343e5ad5861384f1153a6f267420cc43d1
SHA512

9b3f479d5f939a584c6e1f553d79139549640b6fdc4b8dd1e0cb72c6f011ddf3563fc0e6826b47809649fcfd2679277a88cb96e706738d5b437e98e2c5fdd6b1
SSDEEP

98304:WBLaX2XjPrbVGbFWMZNA2wITWuXIu/M1vrGp1oVXx:YLaWrh3WNVwWWuz/M1vqpeXx

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ff65b2c8def38b91397b5d647cdf67343e5ad5861384f1153a6f267420cc43d1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 531KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 74KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE