efa9634d384deccb16add3c513072777af1fa39e1daf6e3a7d3a2d75a6a51a12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efa9634d384deccb16add3c513072777af1fa39e1daf6e3a7d3a2d75a6a51a12
Size

16KB
MD5

e0e3b196baeca7526a80033012c1906c
SHA1

0c74078cd962a9250aa35ef2b0ee1c226b2dd239
SHA256

efa9634d384deccb16add3c513072777af1fa39e1daf6e3a7d3a2d75a6a51a12
SHA512

3a8a349ceb872be0b32175e61aec3a33f7a34b644eb09e9ed1e544ef74a9c92a4abeb08f736714af21d9d2bc6a4fcd2ae369a10ac250f098ef1bccf5536cfb95
SSDEEP

384:4gtXnPEEWdS3L4MkZXz1oy5peJc+V8kq2vVAxwr6+e9Pfqbn1:4gtXPOdXMkZjd5gGU8kq2vOx3ha5

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

efa9634d384deccb16add3c513072777af1fa39e1daf6e3a7d3a2d75a6a51a12
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE