b4967d139cfce00e82251ed66a7ab08cec1bc5960d2ec79d660892319cdfbf0b

General

Target

b4967d139cfce00e82251ed66a7ab08cec1bc5960d2ec79d660892319cdfbf0b
Size

369KB
MD5

60fab6868b3ddd028ca95c67ff32c3d7
SHA1

6367ed0c1210e4e8a6986965a40dddfb2e329e27
SHA256

b4967d139cfce00e82251ed66a7ab08cec1bc5960d2ec79d660892319cdfbf0b
SHA512

00194620eca79ac6f9b1e13a3764820b1e6ce1e117f7b2f3b0a793e1cce48855dc63a5b47f1f85b6acd6651e70d4c9c25a69c83d84deeec01ac954d17b9d01f8
SSDEEP

6144:/wwJ3a3qdtJrJ+NatVBSxeAMyTw01B/G3V3ugG3dOBWPUZVRLMkGNzI19GEWyCYd:IKrOxob01B/GtuniOgrLkzINCXCYpe

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

b4967d139cfce00e82251ed66a7ab08cec1bc5960d2ec79d660892319cdfbf0b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 305KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 305KB - Virtual size: 804KB

DATA Size: 3KB - Virtual size: 8KB

BSS Size: - Virtual size: 5.3MB

.idata Size: 4KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 60KB

.rsrc Size: 18KB - Virtual size: 80KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: 31KB - Virtual size: 32KB

CODE
Size: 305KB - Virtual size: 804KB

DATA
Size: 3KB - Virtual size: 8KB

BSS
Size: - Virtual size: 5.3MB

.idata
Size: 4KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 60KB

.rsrc
Size: 18KB - Virtual size: 80KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: 31KB - Virtual size: 32KB