fa20c692146b45fe78e17009c7060f3ea36a126d8699fda374506de758ec47f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa20c692146b45fe78e17009c7060f3ea36a126d8699fda374506de758ec47f4
Size

602KB
MD5

d00880d13b2a86af13f288252ad1f0ad
SHA1

a0b74141cf3612f6d2d13ac9e0e7705cb64100a0
SHA256

fa20c692146b45fe78e17009c7060f3ea36a126d8699fda374506de758ec47f4
SHA512

cd0898a7dfeac49e0ad760e6035292ef196451cb1efb331835051c9bf85938afb492ac2760abcf0e3573f25367caef6e971835e76f1f6b51fbbcdec94f047cd3
SSDEEP

12288:V3TdtLW5WIj1YSSdFxsBSXyMzBUWb9lx/9AgHLo8OW:9Dsj1dEcBcJ9nPx/igrp

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

fa20c692146b45fe78e17009c7060f3ea36a126d8699fda374506de758ec47f4
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE