acca942cfa566f29b2c985681eff0414991042ad0e89e32a7c326bf3baf2fd27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acca942cfa566f29b2c985681eff0414991042ad0e89e32a7c326bf3baf2fd27
Size

810KB
MD5

5bca0da3ca8e5daca20f17163f45dee8
SHA1

588daa6fa393ecc7a6a58d5f3d99e106cc69ab96
SHA256

acca942cfa566f29b2c985681eff0414991042ad0e89e32a7c326bf3baf2fd27
SHA512

32a03519b48a4d283fdec3cb06a2d2fa69d6bb39c2358cafb341052cd88b497a99fc8b203288bcc1c40ae141e023de2da251af22231986317295b637e8aed85c
SSDEEP

24576:2QMXmLwj09Cx5sOt4gTJLIC7vgOcmjYjjn7IdCYuI:KXm0I0Ps84++Rm4j7IdeI

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

acca942cfa566f29b2c985681eff0414991042ad0e89e32a7c326bf3baf2fd27
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 234KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 514KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE