b7d025f54f4bacd0d7542d23de5a411a12f636cea573feeb99fff23e32f44467

Sharing

Copy URL Twitter E-mail

General

Target

b7d025f54f4bacd0d7542d23de5a411a12f636cea573feeb99fff23e32f44467
Size

397KB
MD5

8d25f6cfcafa9bb910c05f184e9e379e
SHA1

bfd5d7a12f892e76472491605c08322043f876cc
SHA256

b7d025f54f4bacd0d7542d23de5a411a12f636cea573feeb99fff23e32f44467
SHA512

bede5263fdffa1c37e9fc25046876a0c1eb0526661240749a74add28b86797326947166c5b1d79fd8326611d8fd013e473b86c2f18d7eeb9401264d5e314a6b4
SSDEEP

6144:MiCPBEpvvrObrDFjT51S3ANl1qa9V+ctmwX86bWqWlQ6MZ74vr/E2G3xz7ylFnUg:1CSpvKXD743AWXa8KWnlpeipfXn9

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Files

b7d025f54f4bacd0d7542d23de5a411a12f636cea573feeb99fff23e32f44467
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.ycrtwt
Size: 2KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gqagt4
Size: - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2o8nqs
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7ntjts
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edopso
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iypyyv
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.goyee8
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 464KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 383KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.ycrtwt Size: 2KB - Virtual size: 48KB

.gqagt4 Size: - Virtual size: 544B

.2o8nqs Size: - Virtual size: 4KB

.7ntjts Size: - Virtual size: 2KB

.edopso Size: - Virtual size: 8B

.iypyyv Size: - Virtual size: 24B

.goyee8 Size: - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 240KB

.packed Size: - Virtual size: 3.0MB

.data Size: - Virtual size: 464KB

.debug Size: 383KB - Virtual size: 392KB

.aspack Size: 10KB - Virtual size: 12KB

.adata Size: - Virtual size: 4KB

.ycrtwt
Size: 2KB - Virtual size: 48KB

.gqagt4
Size: - Virtual size: 544B

.2o8nqs
Size: - Virtual size: 4KB

.7ntjts
Size: - Virtual size: 2KB

.edopso
Size: - Virtual size: 8B

.iypyyv
Size: - Virtual size: 24B

.goyee8
Size: - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 240KB

.packed
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 464KB

.debug
Size: 383KB - Virtual size: 392KB

.aspack
Size: 10KB - Virtual size: 12KB

.adata
Size: - Virtual size: 4KB