8eba8ea99dd50be373ea2deba53798e2967d57ea2b49d2c32d327a4c51f62215 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eba8ea99dd50be373ea2deba53798e2967d57ea2b49d2c32d327a4c51f62215
Size

2.4MB
MD5

8af50f054a56ab250ff4c1a2381ef27c
SHA1

124004a7eebdb0cb0f2de9561bfdbe0819071723
SHA256

8eba8ea99dd50be373ea2deba53798e2967d57ea2b49d2c32d327a4c51f62215
SHA512

34219dc411cb395f0c673806a5ec0940e5c3136378d609f6ecf9708f024bd979c51690e4c4bbd59e4e2d2e6c9a54396ba391792a6dc9cb4e9a1d55ec87b57b62
SSDEEP

49152:Nsh6I+QhMwuJT915JRltIJhh7s93a2nf1GU+aD2GhQMK060x+:Nsh7oJBLJRltIJjOjfP+aD2GhQ3c8

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

8eba8ea99dd50be373ea2deba53798e2967d57ea2b49d2c32d327a4c51f62215
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE