f4ab689dc25f019b0430a2d2cb14adf8da488c00074f1fee47574ce5ce8f294f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4ab689dc25f019b0430a2d2cb14adf8da488c00074f1fee47574ce5ce8f294f
Size

67KB
MD5

4b8e812a926a3cf003a0ecfb2aa82c60
SHA1

4380e492f1db1cff2b96842c6f0334f02f324710
SHA256

f4ab689dc25f019b0430a2d2cb14adf8da488c00074f1fee47574ce5ce8f294f
SHA512

4c971b6d3cb49d6e5b3371543ebcf94a203727cd99a274859448891629ad330a3e37e5c3d17982982803da5dc006f8095de2c0f3a1acab02821a47d01714f568
SSDEEP

1536:/JtWXJ4/qmBZvoCj5rrNYOQLg279FWxaMVDZtQ8GQFdY:UJ4/ZoCjlNvig2DWx9VDZttd

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

f4ab689dc25f019b0430a2d2cb14adf8da488c00074f1fee47574ce5ce8f294f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orion
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE