41a3d505749f4fc58a40a00b8ffc1ee3147c80d5998727ed2f2e6cea97485964 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41a3d505749f4fc58a40a00b8ffc1ee3147c80d5998727ed2f2e6cea97485964
Size

19KB
MD5

d88dbbf736a40284292d4888344a849b
SHA1

d9845d6f81c08233e85e384c65ada6840545af89
SHA256

41a3d505749f4fc58a40a00b8ffc1ee3147c80d5998727ed2f2e6cea97485964
SHA512

26d066c17d6110fc5ae0b4892f283020c98d42aa428073238d52888af8677c6190da5a67ccc0619ece071d64f561232ae6a1d7f3fb7425a5992bcbd6825482fc
SSDEEP

384:Vd0vyDRswNe9oY2Te3FjtTTr0cdl8mjE7iaWxGMAxdr6+I9PfPPD:Vd08RswQn2TYFjRc/mjA5WxG/xQLfb

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

41a3d505749f4fc58a40a00b8ffc1ee3147c80d5998727ed2f2e6cea97485964
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p5s2
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE