e780d15be31d0eda90da0ad6e0c368b540ab71bdc2af5806d48b4c7a44c5fc23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e780d15be31d0eda90da0ad6e0c368b540ab71bdc2af5806d48b4c7a44c5fc23
Size

129KB
MD5

e2831a3e06fad6d710fd8251124eed47
SHA1

db3cb03f507a0e42c6c4e49125d2cb5788eba98d
SHA256

e780d15be31d0eda90da0ad6e0c368b540ab71bdc2af5806d48b4c7a44c5fc23
SHA512

d1d83939f6cce86666547690ae37a91b586516ca9d8c1fb164dffc9415a6c06aa2d3fc9221bf63cabce6815866a8070a1a1b704781535e6e65f94d6d3cde8ad7
SSDEEP

3072:AjayjJ9q3E88T+a9CsdlWIOi2+7rFsJKrV7EBMOoJzV:AjlgK+0dlTB7psJKrZR

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

e780d15be31d0eda90da0ad6e0c368b540ab71bdc2af5806d48b4c7a44c5fc23
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE