b63018524a31bdbfb0c5160b01d97a541ec4e75ed24fa92c898469a7cd4bc05b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b63018524a31bdbfb0c5160b01d97a541ec4e75ed24fa92c898469a7cd4bc05b
Size

42KB
MD5

253ba9153ae7180c02c383bb1a706316
SHA1

c44f3c11a3ce71eba0035c632f00f2e0686328b9
SHA256

b63018524a31bdbfb0c5160b01d97a541ec4e75ed24fa92c898469a7cd4bc05b
SHA512

9bcb4b39ff1052186395c187eb0ff65174416a20663112bee8f8348928add56c95982ef07c8266c8f0f846f4ba5923ddb487f2b7f12c27dc2c3b60055c2d336d
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888X:BzOCay4wV339rPjzbpLwRJ9pSdoIy

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b63018524a31bdbfb0c5160b01d97a541ec4e75ed24fa92c898469a7cd4bc05b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE