20cff3795f985dc95d5e9e21f81cda0a9236d212a0b7743eb1aba719c8059db4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20cff3795f985dc95d5e9e21f81cda0a9236d212a0b7743eb1aba719c8059db4
Size

89KB
MD5

11e3b7e664b6027f4e8c6900ddce1560
SHA1

e2d21574149122967402cad9e6b30fb6dac341f1
SHA256

20cff3795f985dc95d5e9e21f81cda0a9236d212a0b7743eb1aba719c8059db4
SHA512

18c0b2c5312c4f25c8e58250711a6ae0805699a44f184e006a794f3770a0e9e447579882e13d659ae4ad8ab755b7d9f9d5bb5fbd4ce3f6e527af663034b764bd
SSDEEP

1536:csACrzAGELVgUHCGGNqviFn7s/jfLtpDt19El6WBARVaF2mjeg9jvQnI82w0:FUGTlQvSAlpDtvElT8NKveI8o

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

20cff3795f985dc95d5e9e21f81cda0a9236d212a0b7743eb1aba719c8059db4
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE