229a25aa7253769237a1c0d2a10452987bcd85768ea46db810d3471aa875abba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229a25aa7253769237a1c0d2a10452987bcd85768ea46db810d3471aa875abba
Size

592KB
MD5

285384fc5342315dba206bdb31fa9db0
SHA1

d136d4c26bf546af02c67e9ee0e7b887a65e9cd5
SHA256

229a25aa7253769237a1c0d2a10452987bcd85768ea46db810d3471aa875abba
SHA512

2b736743268309ea0fb5ca1d634d20c95344028352460740ca80a2c988a595765367c2d4c6d9984a6f05dbc2136857225a114286ee25f8f9a2bf09b2a4e491ac
SSDEEP

12288:6ZJQglQA0IWb8DmPySxEuBZDxywHBlP94jpguwDxXlZ1nJ:6Z6gl6Iy8R9+ZdnnP94jpgl9BnJ

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

229a25aa7253769237a1c0d2a10452987bcd85768ea46db810d3471aa875abba
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE