709c3ea7816448b8f84ef5e4fbce1fa0e074e6b184f128729b06d93f9856cad8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

709c3ea7816448b8f84ef5e4fbce1fa0e074e6b184f128729b06d93f9856cad8
Size

844KB
MD5

311d88508da5ed9c803ebcc2dfb185d8
SHA1

620e08f71f44a461a6e278f2b7c5616a1fb3a38b
SHA256

709c3ea7816448b8f84ef5e4fbce1fa0e074e6b184f128729b06d93f9856cad8
SHA512

2f7c13f651bcd454ab592d30c0ff8d9676a8e8cf34541efed077ecd80fce382554f6300bd0e2e429cc48e3fa447782e4a50ab3384d7876423af01c3e90cd3dcc
SSDEEP

24576:9D7RpF9evzPL53k4axhei5LcRth+yiejwSgY0cDcE56xbOv:BDF9ExDax8kLkh+yjsxYd7

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

709c3ea7816448b8f84ef5e4fbce1fa0e074e6b184f128729b06d93f9856cad8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 775KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE