863ab8c722283806fd1b621088ea5b8a0cd535c92578d9cb63abc7a1edeeb72b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

863ab8c722283806fd1b621088ea5b8a0cd535c92578d9cb63abc7a1edeeb72b
Size

42KB
MD5

02a113e177a2299e302500220c2d4d50
SHA1

e90ed4acf93512184a1fdfe60e357aee487f4bd9
SHA256

863ab8c722283806fd1b621088ea5b8a0cd535c92578d9cb63abc7a1edeeb72b
SHA512

4d0e38ed38aa7aa58a07b09d0788723d1366f101fea19092dce4286ecc6481bf623af53e1de06f7d8e55eb404aad6a45033820db4d9c984bf067e067ee0ab590
SSDEEP

768:gSz0/XBwayCUOwV3TNZHdrPeqzEWvpbPwSMX6+w6pqZxLdeVgol9D8888888888h:BzOCay4wV339rPjzbpLwRJ9pSdoII

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

863ab8c722283806fd1b621088ea5b8a0cd535c92578d9cb63abc7a1edeeb72b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE