743e4b0abf3ed529dbe6a57812ba48c2964e211f4aa7d1421272d7d3476c6b0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

743e4b0abf3ed529dbe6a57812ba48c2964e211f4aa7d1421272d7d3476c6b0c
Size

746KB
MD5

0984db308677851fddcb50efda16ba88
SHA1

572b5673cb1a3763c3ccbefe0dc7dfaf1f6fc388
SHA256

743e4b0abf3ed529dbe6a57812ba48c2964e211f4aa7d1421272d7d3476c6b0c
SHA512

647b68919d390c2400e7eae25bac0f0fbff3fd498d831fc01fad3c2c28d99cda373112050c7abffcdf32058fac861d69bcde184c95c7abdf142911d3af2d0760
SSDEEP

12288:aLOXvTcOprEQdU5BbtRHQV9GxaxOfwsu70EnL0WpYKUUKjt2NMrHBP4i/Od29X16:aydIkU5XR+1OI34+cKUUmt+GtTOdAl

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

743e4b0abf3ed529dbe6a57812ba48c2964e211f4aa7d1421272d7d3476c6b0c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 360KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 324KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE