c42adbbb93bac020fef99b4ccfa68529714c5595d5b46667710614ee18dd3598 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c42adbbb93bac020fef99b4ccfa68529714c5595d5b46667710614ee18dd3598
Size

250KB
MD5

dde57407b9d6972ce2f920b9b858c70c
SHA1

282211363f66a05ba3619db70866cf1c3d3961c1
SHA256

c42adbbb93bac020fef99b4ccfa68529714c5595d5b46667710614ee18dd3598
SHA512

794a82e1de68d6308bad155d225003da027dd7940c43299d361ff47a7168141824b07df323ab6e99242b60cb8538820c4b4403fe17b2d417d63408e941c3679f
SSDEEP

3072:VkgTmLvdT9UI1GswNpzAgc8PA8FTXxdk/Uf6Zv:CLvx6I1jaWETXMs2v

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

c42adbbb93bac020fef99b4ccfa68529714c5595d5b46667710614ee18dd3598
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE