2a9cfd27fe73a04ba68a8d2d391c87226595264632158f118aaa37cc1c4fe4d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a9cfd27fe73a04ba68a8d2d391c87226595264632158f118aaa37cc1c4fe4d2
Size

309KB
MD5

19d6d34bf4fff9ec92d9610d0432d810
SHA1

69a0f86168fcbabc7495db6c10a2fc7d1aa07126
SHA256

2a9cfd27fe73a04ba68a8d2d391c87226595264632158f118aaa37cc1c4fe4d2
SHA512

40e93ad9bc7cd7ddaf3e718c0d41fefa77e4f6004275b1f97f709b733a3cc5c712af9bc3654609f85d0be5664a8099686d0b35d074c336ad0794eff7fd0a841c
SSDEEP

6144:DPrO/C0EaOZowyrHc0RLG0aOBAf70GbjUwMD9n/lR7e+XpF:jrkhElZGrHcuLHBS/MD9tR71z

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

2a9cfd27fe73a04ba68a8d2d391c87226595264632158f118aaa37cc1c4fe4d2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YUHFDGE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE