b9d0faa2ac32f7fcffa3dbdbc960387074d24ac702e75c00eef5a55ab4d2f96c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d0faa2ac32f7fcffa3dbdbc960387074d24ac702e75c00eef5a55ab4d2f96c
Size

128KB
MD5

479b83248a88ff16d138552431befa3b
SHA1

3bd7e53a037aeb01924d0f46c01de3bc12a2a84c
SHA256

b9d0faa2ac32f7fcffa3dbdbc960387074d24ac702e75c00eef5a55ab4d2f96c
SHA512

b855b73276ba60c7b6bdd4317fce51ec066c58611707cffdd34af95ba488aebc77c218a3db26449b3b74fb146ff939eb7ac9c39eccf24d09f2c32975a600ca71
SSDEEP

1536:t42WOeK5ELuBrIGY4nuWKEHOSsXfaaelNCIlLjOZK9XR81H4cZgtnH7BtXE1S8h:62J5+2K9hPwlN7djOIR8CcZkH7vEI8

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

b9d0faa2ac32f7fcffa3dbdbc960387074d24ac702e75c00eef5a55ab4d2f96c
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.test
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE