945e8981087b5f6cb0ec596b8fc36e2ff10a74548001b245d4a1ef56cec51e06

General

Target

945e8981087b5f6cb0ec596b8fc36e2ff10a74548001b245d4a1ef56cec51e06
Size

87KB
MD5

7435b8d5855a1af4e7b4671bca15edfd
SHA1

2cc6badcc5c0d4ccd9469c6f1f7bd2efe063fe29
SHA256

945e8981087b5f6cb0ec596b8fc36e2ff10a74548001b245d4a1ef56cec51e06
SHA512

24a79d5cfdfc9b6843b43bdfd71955a3c15ca3e4b5fc72294304ea475e70b630c7d7469f79aea23ab226f15dbc10595e2bf6bd9044d9de1cddd78c0ec85788c8
SSDEEP

1536:UxaLtyEpXgXTJivT6ghDGVlSOCqEl9ZoTqqlFltCqFWBZ:UxaAXTqbJmK9mTXlgX

Score

8^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

945e8981087b5f6cb0ec596b8fc36e2ff10a74548001b245d4a1ef56cec51e06
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 25KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 16KB

.UPX0 Size: 3KB - Virtual size: 8KB

.UPX1 Size: 25KB - Virtual size: 28KB

.reloc Size: 3KB - Virtual size: 4KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 16KB

.UPX0
Size: 3KB - Virtual size: 8KB

.UPX1
Size: 25KB - Virtual size: 28KB

.reloc
Size: 3KB - Virtual size: 4KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB