ea20aca40502a0d374bb3e49a923c2d9fc4857399dcf592aa3b611570ae0ee8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea20aca40502a0d374bb3e49a923c2d9fc4857399dcf592aa3b611570ae0ee8b
Size

84KB
MD5

b187eaac67a3fcd9d5f0b51d09fa1d13
SHA1

5b8b3fc7948f5d506364b0c6fd127c346a881b18
SHA256

ea20aca40502a0d374bb3e49a923c2d9fc4857399dcf592aa3b611570ae0ee8b
SHA512

a4a8c768988d1832b5ad4324dca35c01493385c8dc992f1ba82b4d88c9ae89782e42ca1d35c06cc14594b32a1780a3ee191d812463c725e56e9f0ba51761ac90
SSDEEP

1536:liw3JQmnE3Rmi5gpCcRHJVTH4Ma87Psg9L1Eo/nj8+y8F0rXJRs:lQmnE3RmrpCcrPa8AgJfLy86Ds

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ea20aca40502a0d374bb3e49a923c2d9fc4857399dcf592aa3b611570ae0ee8b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 74KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE