d493ea2489457c2712aabccea1cc5eb4018a718b68a9c20977274ef149f90136 | Triage

Sharing

General

Target

d493ea2489457c2712aabccea1cc5eb4018a718b68a9c20977274ef149f90136
Size

473KB
MD5

e21d6b7e7726b0771df9114077b6ea80
SHA1

e869a69b06eb1ae607080c3936b902f759e9884d
SHA256

d493ea2489457c2712aabccea1cc5eb4018a718b68a9c20977274ef149f90136
SHA512

08c1397b7b3f6b550188c9bcc7ff45699e83a262db2367e97627baec57b2a8a260d2a205a7a0c9d4279b54d6c097f6dc734745f81a925736224b2c774cb7f84a
SSDEEP

6144:bg4rnvrfPf27JkWgr1QAmdVpCBAam9KtQ4Hoss9DKzNCT1gKi4IeFEv0+hdkYIsg:lDfm7Jkd6poJm0UsJYd+/kYImU5x

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d493ea2489457c2712aabccea1cc5eb4018a718b68a9c20977274ef149f90136
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 354KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE