6987cb48593554c90b23a86c5dbfcc1544f8db4a10a822a0710180c24c331886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6987cb48593554c90b23a86c5dbfcc1544f8db4a10a822a0710180c24c331886
Size

702KB
MD5

352ec411be3da3e0f613788e34c1cce0
SHA1

bfb51a592b4af43e843dbc70e7e7bd9d1491b614
SHA256

6987cb48593554c90b23a86c5dbfcc1544f8db4a10a822a0710180c24c331886
SHA512

09bb306e47acc3f1c1365a0c37d2090e973bc79416bd976fc330c22a3bd6073bbb0b08ce0ea9d391c851dd24eb4a3cb0bd41efde8b11ddb4fbd34bdcb76fbadf
SSDEEP

6144:N3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXhFBM7x:N3TdtLW5WIj1YSSdFxFBS

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6987cb48593554c90b23a86c5dbfcc1544f8db4a10a822a0710180c24c331886
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE