fda3b396c195edd6f83ec170f25a5190de6eeeaaf55224572035575376914794 | Triage

Sharing

General

Target

fda3b396c195edd6f83ec170f25a5190de6eeeaaf55224572035575376914794
Size

201KB
MD5

5c3eb419e439d12c58de465cce5009f5
SHA1

da5a0c78deca98f912878125482e64519c3b5686
SHA256

fda3b396c195edd6f83ec170f25a5190de6eeeaaf55224572035575376914794
SHA512

5cc86d3efa91ce3b82293f7818a7b9e2d4b05b0e0bdd5c6cc7662302359b103a14db607a57c2573866dc7da204f73c9eb591931fb839516dfc42eadbc37fb2d6
SSDEEP

6144:X3IoSjsH4mmdHGPeN7Sy05iWYJuZhX/dRxnc5X+:XYoum1CmPq7SFiW1Z9VRxnc5O

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

fda3b396c195edd6f83ec170f25a5190de6eeeaaf55224572035575376914794
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 46KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE