fae0f71d842571f0e3a80acc938d212d9ff96dc37514159306e0c4565a522f05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fae0f71d842571f0e3a80acc938d212d9ff96dc37514159306e0c4565a522f05
Size

703KB
MD5

5d8f59748b513236977f918ee7536cd9
SHA1

03724e16f3d2cd64f0c2b9695e116b8766faf3c9
SHA256

fae0f71d842571f0e3a80acc938d212d9ff96dc37514159306e0c4565a522f05
SHA512

389c1b4878a2eb674c1828fe219b3bf8b54c95f29788ae10d65cfcf10416d14cd21b21acb84e2a63df90987a4b258ba82c62a407eb78d775fd8c70e9fc54fe5d
SSDEEP

12288:6xFCPtE2JsKX2ejrpK9hIUkRcTXfMisL+2dLVu95A3SG3WKYZlOFZDoWk:67WtE2JsKxp4hGR0PTsL+2x6GmPZ

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

fae0f71d842571f0e3a80acc938d212d9ff96dc37514159306e0c4565a522f05
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 274KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 368KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE