9fa94e131917205c69ac8057f09f67d1c924c1e8c03dbd7c387b78add20dafff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fa94e131917205c69ac8057f09f67d1c924c1e8c03dbd7c387b78add20dafff
Size

50KB
MD5

3e4dc4a5aeab3cbb91f77a747231247e
SHA1

0b59324f051c302c72f2da905bc953a85d14361b
SHA256

9fa94e131917205c69ac8057f09f67d1c924c1e8c03dbd7c387b78add20dafff
SHA512

4823fb4f7ade6454f2b44fae39c13990e1367072b22e927ed24734340c47ba036f749d1490e2bde74b0241693b2ea625513f653da5617780dd7eaa50365b32ec
SSDEEP

1536:hqf5nfIJwop23e0PG3MiwM1bS7b2A+0KJoD:hqfhwJwopKs3bwM1bS7b2A4+

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9fa94e131917205c69ac8057f09f67d1c924c1e8c03dbd7c387b78add20dafff
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE