6f72fc348412ce542b0cb35986802fefdab47942191fd83a1d584b9d68b9df8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f72fc348412ce542b0cb35986802fefdab47942191fd83a1d584b9d68b9df8f
Size

804KB
MD5

ecab394adf0498a5a02ce6b39c9c0d74
SHA1

d76765a41b8531494cf8f58c92dba025c982da6e
SHA256

6f72fc348412ce542b0cb35986802fefdab47942191fd83a1d584b9d68b9df8f
SHA512

46d62131701209244990630612a84a71f17672deb168c5a0cbc492ea28e76d5942ebed04e6f27f63659d4e95a66f4bd08e4f642a9dcadb1551a447cc5ed47d59
SSDEEP

24576:WZddDZ28G8MbGdocSBTAgwwEPpjEuFOb:WVw8mbvBTFN2jEuM

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6f72fc348412ce542b0cb35986802fefdab47942191fd83a1d584b9d68b9df8f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 584KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 73KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE