95afeecd612b670772b6fac9e55bfef0f88691ac9247dba856294d67b4b46bf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95afeecd612b670772b6fac9e55bfef0f88691ac9247dba856294d67b4b46bf7
Size

581KB
MD5

dad4bdb4deb4e86290b2d51d3f8edb5a
SHA1

90a75730ba9c9fa01cf4584634814a8eafe4ef19
SHA256

95afeecd612b670772b6fac9e55bfef0f88691ac9247dba856294d67b4b46bf7
SHA512

d60443c52b2cef027365684e80b09a8a0ae1a6f1d25df486c229a77a9331b8728f703b53c28d6e4d882989759eca4e9b124609c3af110e364bc8ad350cf59536
SSDEEP

12288:tumsUIcJGr/eG1E2Yhl4BcjAb2m+AQUclYINUY2:omsDk4eV2Yf4BlQ0iUY2

Score

8^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

95afeecd612b670772b6fac9e55bfef0f88691ac9247dba856294d67b4b46bf7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 339KB - Virtual size: 928KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE