de910533cb0bb42435bacf7bad1375f1fb30fae58212e58dfc495d19ed2c4dc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de910533cb0bb42435bacf7bad1375f1fb30fae58212e58dfc495d19ed2c4dc2
Size

72KB
MD5

a2b5892d258d4b0a7c92bdfb42c556fc
SHA1

3647927e64f8d7834e4e3d02d7c0f4b496b5bf88
SHA256

de910533cb0bb42435bacf7bad1375f1fb30fae58212e58dfc495d19ed2c4dc2
SHA512

d13fb1f7db567465ced48b28ab6c03d0621d46a091e42e0b6120986fa1ec33b4da8c961df16a9f63068406bc83e69b3fe1de68cb41ec24247e3f8156c9c238b0
SSDEEP

1536:RNUTKAK5b+m6OAlzxve5RSKrj43gYquXUW69mb:Rafeb+mzADwRuQYqfcb

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

de910533cb0bb42435bacf7bad1375f1fb30fae58212e58dfc495d19ed2c4dc2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zhxtxzd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE