9e03dea55e86778aa3e0606ade8380e5ca4c6fd7f3feda10dcc27f2b434c5556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e03dea55e86778aa3e0606ade8380e5ca4c6fd7f3feda10dcc27f2b434c5556
Size

1.7MB
MD5

378e3af503a36be87254f7d01b2f61f9
SHA1

7d41c3ae97f1bec9892caeeffe8a36967a2c763a
SHA256

9e03dea55e86778aa3e0606ade8380e5ca4c6fd7f3feda10dcc27f2b434c5556
SHA512

72d357893e96a5310d5938e49092e359c54c3b1011c71ab5b72e81ffea563c93f2062f6859c0f6c204d54024ccb3569cb833f563598be7c257a77037a0195411
SSDEEP

49152:WXTOBM40rK+q/DG9bsLOCEywhj4vrPlq5Qg2Gz4sBT:WXTOC40ry6SqCRwGTDgXzL

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

9e03dea55e86778aa3e0606ade8380e5ca4c6fd7f3feda10dcc27f2b434c5556
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 352KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.3MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE