c804f070f5e6a275bae68d5d2b6047b5c55152897c9efd32a4c414ef883d5d71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c804f070f5e6a275bae68d5d2b6047b5c55152897c9efd32a4c414ef883d5d71
Size

258KB
MD5

241c29d29febc123664ec2a46a6829a1
SHA1

5cad6d5b422d330c0a415252d25c5d144271a831
SHA256

c804f070f5e6a275bae68d5d2b6047b5c55152897c9efd32a4c414ef883d5d71
SHA512

de5210b9a9da4451d436900cd60fdf3ddc51941078fbb4a99dac064dd46ef74dbdd78edbcf5766d1d662c1aca44b8d48667a7d7224a0ec7780624e5c8032bbeb
SSDEEP

6144:GV3O4LBVtZLtRvSHKprKsvxnL3c9b8fLoUs2JIRRHmz4TBlX:+PLB/ZLtAqRJnDi8fLjo9mz4T3X

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c804f070f5e6a275bae68d5d2b6047b5c55152897c9efd32a4c414ef883d5d71
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Sections

.text
Size: 228KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE