d298d68127e10e728b696c266b77dde294fcc4e9f09242bfd52e0cad3bc2ac61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d298d68127e10e728b696c266b77dde294fcc4e9f09242bfd52e0cad3bc2ac61
Size

98KB
MD5

cf3c6eb9ba4817dbcd87cc04a0146ccc
SHA1

1032a859debd34601c2f45898813b919e559d40c
SHA256

d298d68127e10e728b696c266b77dde294fcc4e9f09242bfd52e0cad3bc2ac61
SHA512

acf94858445a9ae09944fbf1644b36563755a4ae0c0a9c11916bd94ff6ce3170438aed8d20399e99bcb9f734f7e87bdc6d969a1addb75b72b8c0424f5c2cd1e6
SSDEEP

3072:hzqAUs1BRq96WAh/M8Iall6E6eI7wIlO:lq61BDHtJIm6ReI7w

Score

8^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d298d68127e10e728b696c266b77dde294fcc4e9f09242bfd52e0cad3bc2ac61
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE