6d81120ed32563ddec15f2a7b18a473b3605ba7900634c5dc59ec4dfbfb460f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d81120ed32563ddec15f2a7b18a473b3605ba7900634c5dc59ec4dfbfb460f0
Size

515KB
MD5

031c56c7224714503198850ee31451e8
SHA1

cc6a503299f50442bde5256bf3565985d9428da8
SHA256

6d81120ed32563ddec15f2a7b18a473b3605ba7900634c5dc59ec4dfbfb460f0
SHA512

64d614e0deceb1ddeae124c384f175994815c0d7aaa39847e2702f5c00eb10146c83aa8e4938f179fb29c7d6f6851e3ef0b3c307194e8345abe002d93163dd05
SSDEEP

12288:XD/zSaPAKgfdVml0sihUYyqLPlhe0o+aKZNDGP:T7N+dAv5YFLtBLawRO

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6d81120ed32563ddec15f2a7b18a473b3605ba7900634c5dc59ec4dfbfb460f0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 320KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 123KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE