afb9e5d63c4f6410afc8a95ad002079dd951cc92fd51653e5548dd56f7376e92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afb9e5d63c4f6410afc8a95ad002079dd951cc92fd51653e5548dd56f7376e92
Size

662KB
MD5

d54f5b3c289b435e65a8cfcc87f6a6a7
SHA1

6b72f61e257b1cd6e169942aee30c30939ffbd41
SHA256

afb9e5d63c4f6410afc8a95ad002079dd951cc92fd51653e5548dd56f7376e92
SHA512

e997b943fd1bce8a300ed4109d8c31e682a95f39f81fabbc2f46c40b4ef166037e257fde3d0ae8c91f8bb6ef0ccfe126b66b68f6f50816676c242d0031a64226
SSDEEP

12288:Das+iCkP8mhxqtOt40eQ/5WnP23eezJlEXJSNN9SDQHgimZmybtva3WwFqij:2s58mhxqtgWPGneYrSDQHgiypva3Pq

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

afb9e5d63c4f6410afc8a95ad002079dd951cc92fd51653e5548dd56f7376e92
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 270KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 341KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE