ddb75c055bd4c787ad8448f1c301eec8234ac5146ea5ee11d153a5a5ee4c079e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddb75c055bd4c787ad8448f1c301eec8234ac5146ea5ee11d153a5a5ee4c079e
Size

289KB
MD5

ec803b9c4121e92564ccd1648f942b25
SHA1

0e7939f068767f9af2d717a47ddfa8ce2d65fbb9
SHA256

ddb75c055bd4c787ad8448f1c301eec8234ac5146ea5ee11d153a5a5ee4c079e
SHA512

acbf34997380ef8356796008ae47de1e92b4631c69f444aef041a5051295793f6e89bc413a94061e544fdef9aa6fa7bd3fdd8bc82bd392f59ec3869ecce72cb2
SSDEEP

3072:CtKwbhVsf/GGRCQZYocsgh9sL9DO3u7F6r:gtbhuDCP9zfr

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ddb75c055bd4c787ad8448f1c301eec8234ac5146ea5ee11d153a5a5ee4c079e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE