3f15933f3c8692726eb0ed2d01e3fe5ad8b239572b4886d76be4306b81051250 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f15933f3c8692726eb0ed2d01e3fe5ad8b239572b4886d76be4306b81051250
Size

555KB
MD5

b2a36684519cbddefeb6ed0ab7f940bc
SHA1

aa5a795c1fe15b0b9570aecb3e44d36cf08d699b
SHA256

3f15933f3c8692726eb0ed2d01e3fe5ad8b239572b4886d76be4306b81051250
SHA512

d08348c3918dc8178ff4b9f206506e809049d5290c75ddb3037582a0626fc42e2dfc84671d6fd4be3ffbca79e58c3de4c0be74b947647d715e890cc3b3c54097
SSDEEP

12288:992kCMmdcLkMNlpoGXFsTDw5fncAoJ2+E8vlBJFV10l9uo7SDfx9:9928OctjJXwAfnot1lBJFV1OuomDb

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

3f15933f3c8692726eb0ed2d01e3fe5ad8b239572b4886d76be4306b81051250
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 197KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 321KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE