d3cbbc811254f8d59aaac858008bc7e97f013930343085d58fe5e1548c28c4ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3cbbc811254f8d59aaac858008bc7e97f013930343085d58fe5e1548c28c4ef
Size

1.1MB
MD5

7ae1a39e1d3ba7359731d168a1d1882a
SHA1

c5560c5a2472513f0d07acb663d1ab4856dd70b3
SHA256

d3cbbc811254f8d59aaac858008bc7e97f013930343085d58fe5e1548c28c4ef
SHA512

80888ceab31f2e6c989cd45469b31439b5bef482fffbd2a75cf3e6e2da3edf0308d740aaeae593780abf0c20eec904fbdc3f95c8333fc81b623e4df528be95d5
SSDEEP

24576:hAXfwjjoM3clBopj661JQpIdHB1Bj0yozBtQk3aY5UbDzdY7r:uXfwjjoM3clU3hdHvNwB/aY2DdY3

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d3cbbc811254f8d59aaac858008bc7e97f013930343085d58fe5e1548c28c4ef
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 807KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 99KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE