1f9039737a51c029001441302287fec57fb26ee661c782f588a5a71bcf57063f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f9039737a51c029001441302287fec57fb26ee661c782f588a5a71bcf57063f
Size

129KB
MD5

c029074f0045cc2463cc4ec600115603
SHA1

b5d813abdd92e567a7f86652375f0805d48f3843
SHA256

1f9039737a51c029001441302287fec57fb26ee661c782f588a5a71bcf57063f
SHA512

6f2741b3301576102f298ef13096e17fbb9b0ee0cfede876fad7a033cd079fd2c4aed421b140b979ef8ce65095dc08d930785929dd891b94b205c789974555d7
SSDEEP

3072:Nvi+Ci+SMMyLEF2z+L9aSybV2GL8Oi5xB/cszr0VF+hYqkXXPfI:Nvl+SnyLEF2zAVo2CuB/cyrqF+hYqqX3

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

1f9039737a51c029001441302287fec57fb26ee661c782f588a5a71bcf57063f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE