9f200488531398eec2640f13491b261f3f4a9c3bda87b5fdd943a254c75607f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f200488531398eec2640f13491b261f3f4a9c3bda87b5fdd943a254c75607f3
Size

26KB
MD5

798cf2ed3160c4d9eafd3809839f50b7
SHA1

c9fdeb6d756831631f7b37943bfc0bb18433a174
SHA256

9f200488531398eec2640f13491b261f3f4a9c3bda87b5fdd943a254c75607f3
SHA512

7acd32d0b2897ef52d3b5570ceb9349d92b3de3f56393dba1071d392672525b943c4dc8fb2cca717a0698a7f443ceb62abb1125f1793861bf8e10c618aaba14b
SSDEEP

384:moszgJF0GITVSV8H6r0m4vy29k2VgTABbZYPiCaLRwWzG2Ax2r6+Y9PffPzZrau:vQdGIT4V8ar0b62gkddwWzGhx5bPrtX

Score

8^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f200488531398eec2640f13491b261f3f4a9c3bda87b5fdd943a254c75607f3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE