90059d80e679a65495f76957df4ce9461e66f4bc5b278c073e1b76c3f5bfe92f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90059d80e679a65495f76957df4ce9461e66f4bc5b278c073e1b76c3f5bfe92f
Size

1.5MB
MD5

c13486f7be8a2effabd6357e6076905c
SHA1

18e9c876069aa0921979316af3591feaf983654f
SHA256

90059d80e679a65495f76957df4ce9461e66f4bc5b278c073e1b76c3f5bfe92f
SHA512

7deafe1d1fa99cc297075fd42762960baf1a48cb9387b4fd70030bb230c9fb8fb7585491fdba7a42141009cbc2486eb0a8f4b91638f2cc9a6fbd21b38cd9bd58
SSDEEP

24576:bel9NawgCPIP6x0tH/7Wg0rZLEM0qycNy1OeIjWdV5Rn8p+QRaFAsZeRwIN:bXwgCIuA7Wgy1ETc4swTKRxW8

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

90059d80e679a65495f76957df4ce9461e66f4bc5b278c073e1b76c3f5bfe92f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 205KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.2MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE