6eb2a132434e4d5515c97f0626aed83a689908bc61bc30556672d7b86bfc610f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eb2a132434e4d5515c97f0626aed83a689908bc61bc30556672d7b86bfc610f
Size

79KB
MD5

b2761aa5af91391c924131ab12ac0bc6
SHA1

15f241a2c49b70399f9f85f1f392e52a79118f48
SHA256

6eb2a132434e4d5515c97f0626aed83a689908bc61bc30556672d7b86bfc610f
SHA512

1a351ad3ec8fb459ab8add689d23d19ef081164c266bf033b632173c0ea83ce4ecc4be5e1176ecd5dc57b4b6ae70729a702be008922b2bba50236fce13f0e20b
SSDEEP

768:Ee+AhlreMp4Pt3UQ9wdgtUa8aXqVzeJFSaRC/FaX+KpxNpQiCPRKyHQAmNqc5Uep:EqwR9LCF24YX+Kp7/SKyHQAhcrIzA

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

6eb2a132434e4d5515c97f0626aed83a689908bc61bc30556672d7b86bfc610f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 923B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kylin
Size: 1024B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ