ba38ad9268eec6f955883a90028e996e45e071fa2d6fbafb92d628133e9b03be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba38ad9268eec6f955883a90028e996e45e071fa2d6fbafb92d628133e9b03be
Size

176KB
MD5

e0f31d7587431999ed395f75286e927c
SHA1

a61c3a4ae897540492460c45e9a3d0c9c5a7e7fe
SHA256

ba38ad9268eec6f955883a90028e996e45e071fa2d6fbafb92d628133e9b03be
SHA512

921dd677a5cbb48b8cfaa55724834d144fcf42dd475b2548e6180de64358c1bb9e10df08b8fc4a2ef84d9a803a3f72a1920b385fb7232822075b78220ad87d35
SSDEEP

3072:DOGw2jxU+lkYYVPEa/ka+D2j3hpxL9tDCFAkcWDXzPA81tknFW1l+2+DxjI5n:K2jy+lkY26D2j3LNn+xzknIl9ABI5

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

ba38ad9268eec6f955883a90028e996e45e071fa2d6fbafb92d628133e9b03be
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

farrrrr
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE