04bea666f39f49ec5779a03924c54fb89b945dc95e8240207a2ddf2fe2b53195 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04bea666f39f49ec5779a03924c54fb89b945dc95e8240207a2ddf2fe2b53195
Size

472KB
MD5

471c3c57796bfda2b7a7f38b1f06ea09
SHA1

6f1fca8017c3f4abd9e5bdce164e3d8131d06d3e
SHA256

04bea666f39f49ec5779a03924c54fb89b945dc95e8240207a2ddf2fe2b53195
SHA512

40633e839cfdfdea122dd159601ade213b8decf5b59fe93c9e7f6bd83708e328c64c882f361fa2aa629b99a92a4b16cab651878f1d14a039f5f7d02b902ccf05
SSDEEP

12288:cQAdFvFNwSszL8BXQSp8IvcnjoiSQdoyI:KTvFNpY89V87jZNdnI

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

04bea666f39f49ec5779a03924c54fb89b945dc95e8240207a2ddf2fe2b53195
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 354KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE