f7ffeda8e8e10dcd7db5c07c64614efd3dc1b0eb8eee9e0d1e761997df078d7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7ffeda8e8e10dcd7db5c07c64614efd3dc1b0eb8eee9e0d1e761997df078d7c
Size

106KB
MD5

e2a4543c18aff72ef8b8af677c0752b5
SHA1

46c835f338e941535316c3f2815b7ad992c36062
SHA256

f7ffeda8e8e10dcd7db5c07c64614efd3dc1b0eb8eee9e0d1e761997df078d7c
SHA512

9320043aedc939d3c0ef0cfa4d39b238cad640357b7005ad9a82c0c5f488e0de2cce9f711a8d6892fe51f01fc5f5e8f81d07851de69a6dc0b924fc49f3c6fe71
SSDEEP

3072:lom8WRdFT+AX1HA4seukXDL8yiFVFXbv9oc1m:umvpjHRuPyiFXFoc4

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

f7ffeda8e8e10dcd7db5c07c64614efd3dc1b0eb8eee9e0d1e761997df078d7c
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.atext
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE