feb4800666f0a5e51a22a439b4e8db52a1e554732599a197e7f2ef3db80312b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb4800666f0a5e51a22a439b4e8db52a1e554732599a197e7f2ef3db80312b9
Size

151KB
MD5

4dbc15a194ae06675ec379589d9ea345
SHA1

d9fb675f6f6cc209947cfd6118cc22e3e4dd67d8
SHA256

feb4800666f0a5e51a22a439b4e8db52a1e554732599a197e7f2ef3db80312b9
SHA512

54f22b1993954d7b9a6643c1318886ffb9daa97a92d23e52ae0d113ff60530c31b189de928c9fd5eefd1978942f183e7fcddd3008fbef0d5e78e8d9cec4ab32a
SSDEEP

3072:ol79iHmf1CIpQVvwDrJp/Ca9Q7q54DQNQoaJKlHaaAp0T5dop4:oZ9iH01CMIwPCOSpDQyJKs5pQ5+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

feb4800666f0a5e51a22a439b4e8db52a1e554732599a197e7f2ef3db80312b9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE