c145b9f5620ebc4cd7ed107c435400753f4ac5826def8f6626974f97545e0e52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c145b9f5620ebc4cd7ed107c435400753f4ac5826def8f6626974f97545e0e52
Size

597KB
MD5

c47cc7abfa1adfd0ecd765c8e6219cac
SHA1

b0f5aebb505eb64a15e9d837c4e04d3d4c8618f1
SHA256

c145b9f5620ebc4cd7ed107c435400753f4ac5826def8f6626974f97545e0e52
SHA512

ed06cf35412d8ba09385ad18f23cf8584ce63ee9de0a64c504e907a672cfa4360e5f8a71e8a027395aa3050eb352b136908e606d0ffe9d290105aa43d110978e
SSDEEP

12288:MuX1ITcwU0R+HWcAeue2kqWBjBKlAnlT3aTdMytLlDB2lEU:MegHUexwBKSlT3ayYLJAlE

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c145b9f5620ebc4cd7ed107c435400753f4ac5826def8f6626974f97545e0e52
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 352KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 33KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE