0d50eb704f7a5e69ba3cdd454e85fefc90cb34dff6c77998c87c227f6230c475 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d50eb704f7a5e69ba3cdd454e85fefc90cb34dff6c77998c87c227f6230c475
Size

1.5MB
MD5

ea2008eb57225ecb35f11d075e8d6d57
SHA1

2ffd9e35a6e0307a6e6b26086d6b4e2d948a8d9c
SHA256

0d50eb704f7a5e69ba3cdd454e85fefc90cb34dff6c77998c87c227f6230c475
SHA512

8284bcf95e417e61a05afa1c25a3b5adaea156a4ca4599cdd56da68f3b20b53ebdb615a364ff675b9d10b3a418bf8151c46b4972d67b68a0351fe515c0fb6dd9
SSDEEP

24576:qLgpfbhk7PTuXcB2LrvgDfmEmii+ZpjGaptSxwFDJFAuBBuXe2/VxIWRw0T7J1vd:9Vbou+Fmi3ZpnpM+DJFAcsewjIkwavt/

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

0d50eb704f7a5e69ba3cdd454e85fefc90cb34dff6c77998c87c227f6230c475
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 146KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 95KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE