b2a210c3b53ceec77150f712fd0215f0c1078dbd1246851b3e0e020cb6c2adbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2a210c3b53ceec77150f712fd0215f0c1078dbd1246851b3e0e020cb6c2adbd
Size

264KB
MD5

c8af74f6f1ead8f6820c21821fda73b5
SHA1

bb1356f9baaac4283d7737f58177dc2f037a06cf
SHA256

b2a210c3b53ceec77150f712fd0215f0c1078dbd1246851b3e0e020cb6c2adbd
SHA512

5e82f85fa139d3f194de037e434bce0877932b78cad8cf78ddbe90050a3715fae31e6014fad4833fde58fa52c7a1cd0d01b776e68bd9145416ac79c47bf88306
SSDEEP

6144:IjSXC3m+SuNFUbBLBcNrvIlPNQij2LeDM+v1J4KjN8cQ16:IgKNFUt8vI5NQijxf4D0

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b2a210c3b53ceec77150f712fd0215f0c1078dbd1246851b3e0e020cb6c2adbd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 209KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE