677462c51c5a5140920d731aee7b8fb6ce8ed7c50702a6374e9e6a447fed7601 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

677462c51c5a5140920d731aee7b8fb6ce8ed7c50702a6374e9e6a447fed7601
Size

1.3MB
MD5

8736f189c3ed173ad47eb6a0f4c31d4a
SHA1

bc1be4d810a30e14d8c62f5df30c00e90f5efe2c
SHA256

677462c51c5a5140920d731aee7b8fb6ce8ed7c50702a6374e9e6a447fed7601
SHA512

367e6c3c50b6720837fd0b3a583726742f8716c0b96ee6769c67bd799e77b575f14946d3fc18435623bdc7eb8a1f6bda5f28ba74df8ba148aad5cf335a5eceea
SSDEEP

6144:+8YESvm+5c8kKCEFtH59FvBkeRg2THfz6NZ524BV0WPHTfuWWI5G/3oqB:+8CmVKCUbFvBkmg27+9jSROEj

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

677462c51c5a5140920d731aee7b8fb6ce8ed7c50702a6374e9e6a447fed7601
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 198KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspahn
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE