02e36c6106b931b98c0a6d7513901ecf0a92fed90db941a2d17f750588e4661c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e36c6106b931b98c0a6d7513901ecf0a92fed90db941a2d17f750588e4661c
Size

391KB
MD5

28c301ba3c056b3e333a78643f95f683
SHA1

cc8c2fa189f657d8b77d29df9ac5b3f59eac92bd
SHA256

02e36c6106b931b98c0a6d7513901ecf0a92fed90db941a2d17f750588e4661c
SHA512

d1d1a2827b399152f35f4b4c5e78ff6b1812dca9bf3b14910006cc2adcd66a8e964f6566aae5e8d28c80a3f82f06196af01982fb0dbb5a6b175df104d9d72ff9
SSDEEP

6144:tZB+goraOMlHZH9tWIAXKIyGVlk8hz64h3kMaIIyX9QvsGql1aZoQxn6+KK:tZrkUZHaIAaHGVlf64h3vJIyQvsDOS

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

02e36c6106b931b98c0a6d7513901ecf0a92fed90db941a2d17f750588e4661c
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_��ӳ��

Sections

.text
Size: 243KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE