950d33fcea80059cefedf5c36e9de2f62f12e0efe1e7f5abae8e1539b917fd3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950d33fcea80059cefedf5c36e9de2f62f12e0efe1e7f5abae8e1539b917fd3b
Size

101KB
MD5

fcba2314cd847542986ff15e4a77867f
SHA1

06a582a96e427b066d541fb97bd0752bcd4429ae
SHA256

950d33fcea80059cefedf5c36e9de2f62f12e0efe1e7f5abae8e1539b917fd3b
SHA512

9d240e1ffc77be63ce87962fe79f754ac2f751bd9bef43740241f7663db893c3703cb91ba8ba787357e7318565a3540c7d8a6d71a0d1e73f61c90692ccf2f349
SSDEEP

3072:2lWr2oG8BJC7ZymrFkmq1oHVSaxrkSx8UfCc1a:wwNG86QoU4Vxjqc1a

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

950d33fcea80059cefedf5c36e9de2f62f12e0efe1e7f5abae8e1539b917fd3b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 90KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE