10ea041ce7a01eaa89a7b141c53087d99bd14c7bdc360390a4aa2f7006261959 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10ea041ce7a01eaa89a7b141c53087d99bd14c7bdc360390a4aa2f7006261959
Size

460KB
MD5

73a71f149d3eea63f3e873c81c5afcee
SHA1

d2c6172f0a82bfc128730e72be9ce06b16b7b1cf
SHA256

10ea041ce7a01eaa89a7b141c53087d99bd14c7bdc360390a4aa2f7006261959
SHA512

7024afa022d21763136b49b0c5d5a98f79a597269db4df64ff4f5f731a24a08df81cf5c80da10db5da1ab3a5776278df442def508c3f2e9d58d454395c32c160
SSDEEP

12288:1bpxTRNJZy9xKbYirOgDzFgL//6bdo1EBP4v4oegJ:1PT/HOSi7i2jv

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

10ea041ce7a01eaa89a7b141c53087d99bd14c7bdc360390a4aa2f7006261959
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Hello
ok

Sections

.text
Size: 290KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE