34d292e884e6cd8c1a07bac11e17d9b42cdc6b65b2944205d0b1a4c92bc919a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d292e884e6cd8c1a07bac11e17d9b42cdc6b65b2944205d0b1a4c92bc919a9
Size

257KB
MD5

9daa599ba93c89204df1eda4e85f40b0
SHA1

d4ef500190028c9c590efece884752796d39d098
SHA256

34d292e884e6cd8c1a07bac11e17d9b42cdc6b65b2944205d0b1a4c92bc919a9
SHA512

1a8942d758ae8fe2c0233f2090255502cee3f93b4419f91cfab2725101273a2fe9b0af43ac6d6e8dd544468648fde2450480120a708c97f8c96fbe985973b2fe
SSDEEP

6144:fGp7nEZcVRiim+BQ7C1zx1jAOf6gBib+HwTBlBmW:ncVRiiZrBJEKwT3QW

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

34d292e884e6cd8c1a07bac11e17d9b42cdc6b65b2944205d0b1a4c92bc919a9
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

gjqjopftxfy

Sections

.text
Size: 227KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE