d6429c82359ebaef4d205aa3fa56ae3dae681f28c704ef05fe0168072174b367 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6429c82359ebaef4d205aa3fa56ae3dae681f28c704ef05fe0168072174b367
Size

22KB
MD5

0e6f548d4f49c69ca66340a5af51e172
SHA1

9a63b9179f2a9e9a5fd84e51fd5764a2f11a5568
SHA256

d6429c82359ebaef4d205aa3fa56ae3dae681f28c704ef05fe0168072174b367
SHA512

ad7e4b306742557bd9f0bb1299e2db062b7481ef556e81c5ed6e032e3b80ec6de75d018ff1970ea2f329267d3b2aaa9e431baf986a38e422f7e835c0061993de
SSDEEP

384:o1D0P4X6rMzV+MPkMoVzEZtheWU9LQHBmFbilEWrG4Ax4r6+Y9PffPzk:kQAKMV+dytA9LaBmFbRWrGjxvbPrk

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

d6429c82359ebaef4d205aa3fa56ae3dae681f28c704ef05fe0168072174b367
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE