638b8ba7fb02e82bb0e345372410cc8d6488865bc6d66b415835d543d86e63be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

638b8ba7fb02e82bb0e345372410cc8d6488865bc6d66b415835d543d86e63be
Size

90KB
MD5

19ff8e1637a7f5d275cebde78778d630
SHA1

8857d41e5975453ae0d849179fa95291d955d527
SHA256

638b8ba7fb02e82bb0e345372410cc8d6488865bc6d66b415835d543d86e63be
SHA512

0a48f90f5234fe341242682115170d5284b5fb5a49a639ff37687b07825fc6e0c2c06c317854775744e46702d176a6dcde8e5ba7217089ca530752e8fc8cec3a
SSDEEP

1536:vPeZ7ITRLuCuK1mmDUxRk6PP0hbS6lmkgHSKfNm0WyeLk9D:XeGoCuK1mJx/0h26lmVHnfNdbR

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

638b8ba7fb02e82bb0e345372410cc8d6488865bc6d66b415835d543d86e63be
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 65KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE