51b434bc8a137569c4eb3a6845e0fca53276abb78276a51e1e96787316e570c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51b434bc8a137569c4eb3a6845e0fca53276abb78276a51e1e96787316e570c4
Size

442KB
MD5

7949a1679724f8588d55f08ab01524ff
SHA1

f523f7beadc8a45ccefdf4e1b442c3e86337e8d7
SHA256

51b434bc8a137569c4eb3a6845e0fca53276abb78276a51e1e96787316e570c4
SHA512

bc21bcd6991da0004211cf6268c06a9477e01b9d9bbe67636d2b7f5d6219d48c30baad34150bd9b307a8ad2d0c8207258049fb27fe2513a0b3606b193d7b7ee6
SSDEEP

6144:5dVab/LPSi6NJo0TrIgspDfVzO84KanQ3rGWiabaF9u3jE1vIvQ7Asy04Eki2if/:5Tab/+Naa2Dfu7QyJabqVsQ7A+yqHf

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

51b434bc8a137569c4eb3a6845e0fca53276abb78276a51e1e96787316e570c4
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE