98f4309471d3d2037f01e49f3b6be6c141d6f6aa0c5dfbc63b73a1bc2059dd4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f4309471d3d2037f01e49f3b6be6c141d6f6aa0c5dfbc63b73a1bc2059dd4f
Size

270KB
MD5

e336704cfcbaa9b051aedbde8000c287
SHA1

581487f654c328f8d6ca3b6c94016d496ca149b7
SHA256

98f4309471d3d2037f01e49f3b6be6c141d6f6aa0c5dfbc63b73a1bc2059dd4f
SHA512

81061918cbab5896dd6fe9e2465a1b224d9cb0fd2e68ccad9edbcc1317fadff9d4629345f3646626c21edb07db6cd1f8d73fe5cde03b193f48afb4375f12ae8e
SSDEEP

6144:uP3VkAflNR1mmUZwyF7hZUjjDZtKJgVOq4rbgZ2:GVbIzZN7MXVy

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

98f4309471d3d2037f01e49f3b6be6c141d6f6aa0c5dfbc63b73a1bc2059dd4f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE