b94abba2907ae698b244b2c2f5531d1d5af65b57193940a873fae41501b10a8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b94abba2907ae698b244b2c2f5531d1d5af65b57193940a873fae41501b10a8f
Size

268KB
MD5

931a137392f74b106e0673f183c11c27
SHA1

101ef82e848e33e0a6c9934ca14e946e821608b8
SHA256

b94abba2907ae698b244b2c2f5531d1d5af65b57193940a873fae41501b10a8f
SHA512

4de3b5f54e2192275eea7def232f10b608a33a59aedf9ccf74a6611ce61cb54577aa1590f6ba6932f8dc7d87f8e2e62f64411efaac1a87d21680bab13275fb41
SSDEEP

6144:Hknno5UzzJ2As59QmGZIxbrvCA89DbKz+jw/OdpNQ155:qnJq59H6IFrqA8hGCjw/EpNQ155

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b94abba2907ae698b244b2c2f5531d1d5af65b57193940a873fae41501b10a8f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 194KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE