a59f269638e74f15a1c404f3522faf0b19dc872b28a3379b238b0bef4c79c010 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59f269638e74f15a1c404f3522faf0b19dc872b28a3379b238b0bef4c79c010
Size

404KB
MD5

fd3e11de79fd12da73ba4be495a7992d
SHA1

318e1d4b47019046188319eeedeb33271ee40307
SHA256

a59f269638e74f15a1c404f3522faf0b19dc872b28a3379b238b0bef4c79c010
SHA512

4f4cced479b5dc020ca9f4420e84d976c70485fda02c363a10e429e2cec11e4e579884c5e035475fe7f6f22dde456575e81c74a5190b28807bfc4905fb3b1abd
SSDEEP

6144:vQ1paHiY3hMOwKQOZy+IJre+y6A+XOHP+/WpgZXQuuI2MmudDh96Rs:oCHiYq2E+IJat6YmepgZXQukMlDh92

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a59f269638e74f15a1c404f3522faf0b19dc872b28a3379b238b0bef4c79c010
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 195KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

521
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE