a3ab15cf0cec182be76e0f54f4ea2f5f0a75b59d46620e69a53ef23b292a1120 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3ab15cf0cec182be76e0f54f4ea2f5f0a75b59d46620e69a53ef23b292a1120
Size

154KB
MD5

1a55ee48db70217d89dc2735a42fbd84
SHA1

cea9b0f41493b67fdbdb5bac130fb5891f1bbe2a
SHA256

a3ab15cf0cec182be76e0f54f4ea2f5f0a75b59d46620e69a53ef23b292a1120
SHA512

5b8154e04c7a338c40314855e856df1e39734112bc0093b382a2c51a56b8146e2f99d6c9f1d51b77befee4f1ff60d2eb7df223f8aa901898cc66efaed9e81b29
SSDEEP

3072:NP0qUw3AfyZWhkSeu1479Oxn7NY/ZIPdSOO18Liw8KE+oIMKGmy:eqdwf+WhuCCwxmpIME

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

a3ab15cf0cec182be76e0f54f4ea2f5f0a75b59d46620e69a53ef23b292a1120
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE