a288a5e1b46cb29f64620f0e1ed94dc5dcf801bed3409d037bc7410ce4ec276f | Triage

Sharing

General

Target

a288a5e1b46cb29f64620f0e1ed94dc5dcf801bed3409d037bc7410ce4ec276f
Size

1.1MB
MD5

4c6ec71c8f51cc7b6ff9314d14d4f9ff
SHA1

00aa91e34534d6312991db9565577837d673918c
SHA256

a288a5e1b46cb29f64620f0e1ed94dc5dcf801bed3409d037bc7410ce4ec276f
SHA512

a946e593e89bff41662dfbfd0567f809b4cfb99a3a63a56a4b0fad2ff5972b1ec0f34bcad63bc1c0608594e362adc5bd8b855a9ac8ebe92c22ed500f46468a36
SSDEEP

24576:k9hXwslDxpwDLT1+qwh13i2p9Ss1efRvbIJgpm+r529avH/LrzOcUt5wm+m0:k9i2p4n1I59Ss1gNIJgw+F29avjryxg3

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a288a5e1b46cb29f64620f0e1ed94dc5dcf801bed3409d037bc7410ce4ec276f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 870KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 65KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE