e9905005551989cdae0d1fe4fb20b32eba23621952e19adfca828995d21d89f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9905005551989cdae0d1fe4fb20b32eba23621952e19adfca828995d21d89f7
Size

602KB
MD5

36482cb066eaf754cb30f15344011f30
SHA1

99b04c930d58dc63279ca562f4d9a5c1d6f67d85
SHA256

e9905005551989cdae0d1fe4fb20b32eba23621952e19adfca828995d21d89f7
SHA512

5b55749a6de51fd1f184414d2bd1c9b2f44bf09bd2f05273dd503baaa073b7a9677e2c971bfab089db1e05af5d473f37d73f92c9f4d690607cbe76d455501e47
SSDEEP

12288:h3TdtLW5WIj1YSSdFx+5p9Sj8OIWrQhpZ9fYYeVgf2:ZDsj1dEgSsWaZWgu

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

e9905005551989cdae0d1fe4fb20b32eba23621952e19adfca828995d21d89f7
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE