8f5642f51534863a7b45b82c37658853e024e527523245d446bb636a5090014d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f5642f51534863a7b45b82c37658853e024e527523245d446bb636a5090014d
Size

2.3MB
MD5

9feb8e8b6e0bc626666eb8b7b7868084
SHA1

fe42678c7c060fb233a93c2e4363e5c6071f7d99
SHA256

8f5642f51534863a7b45b82c37658853e024e527523245d446bb636a5090014d
SHA512

6d5197dde88db7e9e248312cfc768ab0122491932000ca591423ec0275af3fad47eb65ddf086cebdd4df804ab2d15b009651338cf70ff73b5a7c4bceaf513ad2
SSDEEP

49152:eeIirpoFunGG99ak7NPrNybOT+Nmb7wU5lgiYlS0x37r4xN:HIlFuGi/NxybO6UtEiYlS0x332

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

8f5642f51534863a7b45b82c37658853e024e527523245d446bb636a5090014d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE