9687b1d916325973e61fe232937f79b053a91503c29fc45a06635bdbe2a4e172 | Triage

Sharing

General

Target

9687b1d916325973e61fe232937f79b053a91503c29fc45a06635bdbe2a4e172
Size

1.1MB
MD5

d13641e74256360661becf46bd2c48b1
SHA1

0f9e0bd9f60d0012644557cfc6e4dbfc49996d9d
SHA256

9687b1d916325973e61fe232937f79b053a91503c29fc45a06635bdbe2a4e172
SHA512

cce6ecf20e85f431910e2fca87965b79299554b9c45e1de88b4c50a3646c307bb642e67378fb9421635d1ed895ee7a7df213109354950d22a25d58e32671b63d
SSDEEP

24576:gpzTt4/yZVXpGxnFYjbwXWCWfOd+jbKuwDffQn4B:yvRVXUvYjb3CoOdmh4B

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9687b1d916325973e61fe232937f79b053a91503c29fc45a06635bdbe2a4e172
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.edata
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 831KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 537B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE